ispconfig3_install/CONTRIBUTING.md0000775000000000000000000002473415114346020015612 0ustar rootroot# Contributing to ISPConfig ISPConfig is a open source project and community contributions are very welcome. To contribute, please stick to the guidelines. This document is under development and will be continuously improved. Please do not refactor existing code and do not change the signature or the behaviour of central functions or libraries. Such changes may only be made by the core development team. We have had many bad experiences with such changes affecting the stability of ISPConfig, so we no longer accept submissions containing such changes. Merge requests containing such changes will be closed and not merged. # Issues * Before opening a new issue, use the search function to check if there isn't a bug report / feature request already. * If you are reporting a bug, please share your OS and PHP (CLI) version. * If you want to report several bugs or request several features, open a separate issue for each one of them. * Do note re-open issues that were closed by the core dev team unless something new and important that is not mentioned in the original issue needs to be added. Permanently re-opening issues that we commented on and closed will get your account banned. You may add comments to issues without re-opening them though. # Branches * If you are a new user, please send an email to: dev [at] ispconfig [dot] org to receive rights to fork the project. * Please create an issue for each contribution you want to make. * Do not put multiple contributions into a single branch and merge request. Each contribution should have it's own branch. * Do not use the develop branch in your forked project for your contribution. Create a separate branch for each issue. * Give your branch a name, e. g. `6049-update-the-contributing-doc ` where 6049 is the issue number. # Merge requests Please give your merge request a description that shortly states what it is about. Merge requests without a good title or with missing description will get delayed because it is more effort for us to check the meaning of the changes made. Once again: Do not put multiple things into a single merge request. If you for example fix two issues where one affects apache and one mail users, use separate issues and separate merge requests. You can group multiple issues in a single merge request if they have the same specific topic, e. g. if you have one issue stating that a language entry in mail users is missing and a second issue that a language entry for server config is missing, you can put both issues into a single branch and merge request. Be sure to include all issue ids (if multiple) into the merge request's description in this case. * Open a issue for the bug you want to fix / the feature you want to implement * After opening the issue, commit your changes to your branch * Note the issue # in every commit * Update the documentation (New devs will not have access to this. Please send a email to docs@ispconfig.org) * Add translations for every language * Use a short title * Write a clear description - for example, when updating the contributing guidelines with issue #6049: \ "Update of our contributing guidelines \ Closes #6049" * Please be aware that we are not able to accept merge request that do not stick to the coding guidelines. We need to insist on that to keep the code clean and maintainable. # Some guidelines for web development with php. ----------------------------------------------------- * Don't use features that are not supported in PHP 5.4, for compatibility with LTS OS releases, ISPConfig must support PHP 5.4+ * Don't use shorttags. A Shorttag is ` always use `uses() or $app->load() functions. * Classes for the server are located in server/lib/classes/ and loaded with $app->uses() or $app->load() functions. ### Indentations Indentations are always done with tabs. Do **not** use spaces. It is recommended to set your IDE to display tabs with a width of 4 spaces. ### Variable and method / function names Methods and functions should always be written in camel-case. Variables and properties should always be lowercase instead. **Correct:** ```php class MyClass { private $issue_list = []; private function getMyValue() { } } ``` **Wrong:** ```php class my_class { private $IssueList = []; private function get_my_value() { } } ``` ### Blocks #### Curly braces Opening curly braces always have to be in the same line as the preceding condition. They are separated by a single space from the closing paranthesis. Closing curly braces are always on a separate line after the last statement in the block. The only exception is a do-while block where the logic is inverted. Curly braces are **always** to be used. Do not leave them out, even if there is only a single statement in the corresponding block. **Correct:** ```php if($variable === true) { } while($condition) { } do { } while($condition); ``` **Wrong:** ```php if($variable === true){ } if($variable === true) { } if($variable === true) $x = 'no braces'; while($condition) { } ``` #### Short style The short style of conditional assignments is allowed to be used, but it must not affect readability, e. g. they shall not be nested. **Allowed:** ```php $a = 0; if($condition === true) { $a = 1; } $a = ($condition === true ? 1 : 0); ``` **Disallowed:** ```php $x = ($condition === true ? ($further == 'foo' ? true : false) : true); ``` #### Spaces and paranthesis The rules for using spaces are: - no space after `if`/`while` etc. and the following opening paranthesis - single space after closing paranthesis and before opening curly brace - no spaces at the end of a line - no spaces after opening paranthesis and before closing paranthesis - single space before and after comparators **Correct:** ```php if($variable === $condition) { } while(($condition !== false || $condition2 === true) && $n <= 15) { $n++; } ``` **Wrong:** ```php if ($variable===$condition) { } while(($condition!==false||$condition2===true))&&$n<=15){ } ``` #### Newlines inside of conditions Breaking up conditions into separate lines can be done if it positively affects readability. ```php if($condition === true && ($state === 'completed' || $state === 'pending') && ($processed_by !== null || $process_time < time())) { } ``` can also be written as ```php if($condition === true && ($state === 'completed' || $state === 'pending') && ($processed_by !== null || $process_time < time()) ) { } ``` This must not be abused, e. g. the following is not allowed: ```php if($a == 1 || $b == 2) { } ``` ### Arrays #### Short syntax Please **do** use short array syntax. We have deprecated the old-style array syntax. **Correct**: ```php $var = []; $var2 = [ 'conf' => [ 'setting1' => 'value1' ] ]; ``` **Wrong:** ```php $var = array(); $var2 = array( 'conf' => array( 'setting1' => 'value1' ) ); ``` #### Spaces and newlines When defining an empty array, both brackets shall be on the same line. When defining an array with values, the style depends on the values you are going to assign. ##### List of values When defining an array with a list of values, e. g. numbers or names, they should be on the same line as the brackets without using new lines, as long as the line does not exceed a total number of characters of about 90. After each comma there has to be a single space. ##### Nested array When defining a nested array onle the opening bracket is to be on the same line. The closing bracket has to be on a separate line indented by `tabs * level of array`. ##### Examples ```php // empty array $a = []; // array with list of values $array = [4, 3, 76, 12]; // array with long list of values $array = [ 'This is one entry', 'This is a second one', 'Another one', 'Further entries', 'foo', 'bar', 34, 42, $variable, // newline here for better readability 'Next entry', 'the last entry' ]; // nested array $array = [ 'conf' => [ 'level' => 1, 'settings' => [ 'window' => 'open', 'door' => 'closed ] ] ]; ``` **Not-to-dos:** ```php $array=[ ]; $array = [ 1, 4, 35, 23, 345, 11, 221, 'further', '...' ]; $array=['conf'=>['settings'=>['window' => 'open', 'door' => 'closed]]]; ``` ### Strings Whenever possible use single quotes `'` instead of double qoutes `"`. Try not to embedd variables in string. Concatenate them instead. **Correct:** ```php // simple text $var = 'This is a text'; // array index $array['index'] = 'value'; // text with variables $var = 'This is a text with ' . $value . ' values inside and at the end: ' . $sum_value; // dynamic array index $idx = 'index' . $key; $value = $array[$idx]; ``` **Wrong:** ```php // simple text $var = "This is a text"; // array index $array["index"] = 'value'; // text with variables $var = "This is a text with $value values inside and at the end: {$sum_value}"; // dynamic array index $value = $array['index' . $key]; $value = $array["index{$key}"]; ``` # Where to store custom settings ## Interface settings The recommended place to store global interface settings is the ini style global config system (see system.ini.master file in install/tpl/ to set defaults). The settings file gets stored inside the ispconfig database. Settings can be accessed with the function: ``` $app->uses('ini_parser,getconf'); $interface_settings = $app->getconf->get_global_config('modulename'); ``` where modulename corresponds to the config section in the system.ini.master file. To make the settings editable under System > interface config, add the new configuration fields to the file interface/web/admin/form/system_config.tform.php and the corresponding tempalte file in the templates subfolder of the admin module. ## Server settings Server settings are stored in the ini style server config system (see server.ini.master template file) The settings file gets stored inside the ispconfig database in the server table. Settings can be accessed with the function $app->getconf->get_server_config(....) Example to access the web configuration: ``` $app->uses('ini_parser,getconf'); $web_config = $app->getconf->get_server_config($server_id,'web'); ``` # Learn about the form validators There are form validators in interface/lib/classes/tform.inc.php to make validating forms easier. Read about: REGEX,UNIQUE,NOTEMPTY,ISEMAIL,ISINT,ISPOSITIVE,ISIPV4,ISIPV6,ISIP,CUSTOM ispconfig3_install/LICENSE0000775000000000000000000000276515114346020014366 0ustar rootrootCopyright (c) 2007-2020, Till Brehm, ISPConfig UG All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of ISPConfig nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. ispconfig3_install/README.md0000775000000000000000000000411115152616670014640 0ustar rootroot# ISPConfig - Hosting Control Panel ![ISPConfig logo](https://www.ispconfig.org/wp-content/themes/ispconfig/images/ispconfig_logo.png "") \ Development branch: [![pipeline status](https://git.ispconfig.org/ispconfig/ispconfig3/badges/develop/pipeline.svg)](https://git.ispconfig.org/ispconfig/ispconfig3/commits/develop) ## Functions - Manage multiple servers from one control panel - Single server, multiserver and mirrored clusters. - Webserver management - Mailserver management - DNS server management - Virtualization (OpenVZ) - Administrator, reseller, client and mailuser login - Open Source software ([BSD license](LICENSE)) ## Supported daemons - HTTP: Apache2 and NGINX - HTTP stats: Webalizer, GoAccess and AWStats - Let's Encrypt: Acme.sh and certbot - SMTP: Postfix - POP3/IMAP: Dovecot - Spamfilter: Rspamd and Amavis - FTP: PureFTPD - DNS: BIND9 and PowerDNS[^1] - Database: MariaDB and MySQL [^1]: not actively tested ## Supported operating systems - Debian 11 - 13, and testing - Ubuntu 22.04 - 24.04 - CentOS 8 - AlmaLinux 8 - 10 - Rocky Linux 8 - 10 ## Supported PHP versions Multiple PHP versions are supported on the same server for hosted sites. But for the panel itself it's advised to stay with the version that comes with the OS. In general the ISPConfig panel supports PHP 7.4 - 8.4 ## Auto-install script You can install the "Perfect Server" with ISPConfig using [our official autoinstaller](https://www.howtoforge.com/ispconfig-autoinstall-debian-ubuntu/) ## Migration tool The Migration Tool helps you to import data from other control panels (currently ISPConfig 2 and 3 – 3.2, Plesk 10 – 12.5, Plesk Onyx, CPanel[^2] and Confixx 3). For more information, see https://www.ispconfig.org/add-ons/ispconfig-migration-tool/ [^2]: The Migration Toolkit now contains beta support for migrating CPanel to ISPConfig. ## Documentation You can support ISPConfig development by buying the manual: https://www.ispconfig.org/documentation/ ## Contributing If you like to contribute to the ISPConfig development, please read the contributing guidelines: [CONTRIBUTING.MD](CONTRIBUTING.md) ispconfig3_install/RELEASE.md0000775000000000000000000026120415274156743015000 0ustar rootroot## ISPConfig 3.3.3 Released This release fixes security issues and bugs discovered after the 3.3.2p1 release. We recommend that all users update. Already on 3.3.3 or 3.3.3p1? The two sections below list what the patch releases changed; the rest of this document describes 3.3.3. ### Changes in 3.3.3p2 - Websites on Apache: saving the Options tab failed with "Nginx directive blocked by security settings: include" when the website had stored nginx or proxy directives, which are hidden on Apache (e.g. from a former nginx server or set through the remote API). Stored directives that are sent back unchanged are now kept with a notice; new or changed directives are checked as before. - Panel: after an error on a tab without the name field (e.g. the Options tab of a website), the heading shows the name of the record again instead of "Web Domain -". - Multiserver: slave servers no longer log "command denied" errors for the master database when the name of a client database or database user is refused because it exists already on the server. - Shell users: the jailkit maintenance accepts user and group names with a dot, like the creation of the shell user (#7096). - Update: the installer no longer shows the PHP message "Creation of dynamic property db::$errorMessage is deprecated". When the server users can not be read from the master database, the update warns that their rights are not updated and goes on instead of stopping. - Remote API: bugs found while writing the new API examples are fixed (#7095). The changes callers may notice are listed in docs/Remote_API_changes.md; `$conf['remote_api_version'] = 1;` keeps the old behaviour where noted there. - Remote API examples: every function has a SOAP and a JSON example in remoting_client/examples, and the documentation in remoting_client/API-docs is generated from them (#7094). ### Changes in 3.3.3p1 - New setting System > Server Config > Web > "Certificate of a website named like the server host name" (#7093), see the notes for the update below. ### Security issues fixed in this release - Privilege escalation of an authenticated client in the website module, reported by Saad ZITOUNI. - A client could change the spamfilter settings of another client in the email module, reported by kta1kri (#7070). - CSRF issue in the data log history viewer, reported by Alexei Khairov. We thank the reporters for disclosing these issues responsibly. In addition, an internal code review of ISPConfig 3 found and fixed further security issues and many bugs; they are part of the lists below. ## What's new in ISPConfig 3.3.3? ### New Security Check Page The new admin page Tools > Security check lists websites, users and settings with a known risk that ISPConfig does not change automatically, because they are a choice of the administrator or left over from an older version: - Websites whose PHP-FPM pool listens on a TCP port instead of a socket - Resellers that can use the website options (free web server directives) - Remote users that can log in from any address - Panel and remote users with a password hash of an older ISPConfig version - Records of websites that no longer exist - Secondary DNS zones of clients with a private or loopback primary server Each entry explains what to change. We recommend checking this page after the update. ### Notes for the update - Remote API users: the changes of the remote API that callers may notice are listed in docs/Remote_API_changes.md. - The update logs out all users of the control panel once, including sessions with "Stay logged in". Everybody has to log in again after the update. - The data log history in the monitor module is now only available for administrators. - The check of the Apache and nginx directives in the website options refuses more directives. Existing websites keep their directives, they are checked again when the website is saved. - Websites whose document root, PHP open_basedir or Apache AllowOverride contains spaces, line breaks or quotes (or whose document root is not an absolute path) are no longer written by the server; the server log shows a warning "Invalid document root, open_basedir or AllowOverride of website ...". Please correct these values in the website options. - The values of select, radio and checkbox fields must be one of the options of the field, in the control panel and in the remote API. Values that are already stored stay valid. Apps that use the remote API and depend on the old behaviour can set `$conf['remote_api_version'] = 1;` in interface/lib/config.inc.local.php (the default is 2). - Host names in the remote access list of MySQL databases are now granted on the database server, together with the IP addresses. Please run Tools > Resync for the databases after the update so that the database users of all databases are written again. An entry that is neither an IP address nor a host name (for example `192.168.1.%`) is not granted; leave the list empty to allow every host. - nginx: the vhost template of the websites has changed. Please run Tools > Resync > Websites on nginx servers after the update, so that all websites get the new configuration (otherwise a website gets it when it is saved the next time). - Borg backups no longer use a repository folder or a website backup folder (`web` in the backup directory) that is a symlink; such backups and restores stop with a warning in the log. Link or mount the whole backup directory instead. - The update scans the grants of the MySQL client databases for incorrect grants and fixes them. Grants it cannot fix, for example grants that were changed by hand, are listed as warnings during the update. - Pure-FTPd now uses a real chroot on Debian and Ubuntu (VIRTUALCHROOT=false in /etc/default/pure-ftpd-common), the update sets it when the services are reconfigured. FTP users no longer follow symlinks that point outside their directory, for example to another website. Relative symlinks inside the website and the log folder keep working. - The remote API no longer returns password hashes, the two-factor and password reset data of panel users and the private SSH key of clients, and these fields can not be used as filter. Apps that need them (for example for a migration) can set `remote_api_password_hashes=yes` in /usr/local/ispconfig/security/security_settings.ini. - The update now keeps changed values of /usr/local/ispconfig/security/security_settings.ini (since 3.2 they were reset to the defaults). When server/conf-custom/install/security_settings.ini.master exists, that file is used as before. - The remote API is now disabled on new installations (`remote_api_allowed=no` in /usr/local/ispconfig/security/security_settings.ini). The update also disables it on servers that have no remote user (System > Remote Users), servers with remote users keep their setting. To use the remote API, set `remote_api_allowed=yes` in that file on the server that runs the control panel. System > Remote Users shows a notice while the remote API is disabled. - The remote function `client_login_get` now also limits failed logins per user name (10 within 5 minutes). - The remote functions `sys_datalog_get` and `sys_datalog_get_by_tstamp` need the new remote permission "Datalog functions". The update grants it to remote users with the "Server functions"; other remote users that need these functions must get it in System > Remote Users. Their records leave out passwords and keys unless `remote_api_password_hashes=yes` is set. - The mail import from ISPConfig (Tools > Import > ISPConfig Mail) now checks the SSL certificate of the remote server. For a remote server with a self-signed certificate, tick "Accept a self-signed or invalid SSL certificate of the remote server". The password of the remote user is no longer shown on the import page. - The remote functions `server_config_set`, `system_config_set`, `server_ip_add`, `server_ip_update` and `server_ip_delete` follow the settings `admin_allow_server_config`, `admin_allow_system_config` and `admin_allow_server_ip` in /usr/local/ispconfig/security/security_settings.ini: with `no` they are refused. Nothing changes with the default `superadmin`. - The remote functions of a DNS record type (for example `dns_txt_get`, `dns_txt_add`, `dns_txt_update`, `dns_txt_delete`) only read, change and delete records of that type. To read all records of a zone use `dns_rr_get_all_by_zone`; to change the type of a record, delete it and add a new one. - WebDAV users created or changed through the remote API now get the same password digest as in the control panel, so they can log in. Apps that already send the digest must also send `_ispconfig_pw_crypted=1`. WebDAV users that were created through the remote API before need a new password. - The lost password page gives the same answer for every request. Password reset links that were sent before the update no longer work; users can request a new link. - Creating the firewall record of a server (System > Firewall) no longer resets UFW, and deleting it removes only the ports of the record before UFW is stopped. UFW rules that were added outside ISPConfig are kept. - Generated passwords ("Generate password" buttons) are now 16 to 20 characters long and contain more special characters. - Clients and resellers can add mail transports only for their own domains and their subdomains. Administrators can add transports for any domain as before. - A website named like the host name of the server (the `hostname` in System > Server Config > Server) now shares its Let's Encrypt certificate with the server when acme.sh is used: the certificate is installed as the server certificate (/usr/local/ispconfig/interface/ssl/ispserver.crt and ispserver.key, used by the control panel, Postfix, Dovecot and Pure-FTPd) and the SSL files of the website link to it. The certificate then contains the domains of the website (e.g. the www subdomain and alias domains), and the renewal of the certificate runs the ISPConfig renew hook again, which reloads the services. Before, the website took over the certificate of the server and the server certificate was no longer renewed. Nothing changes with certbot, where the website and the server already used the same certificate. - Changed in 3.3.3p1: this is now a setting, System > Server Config > Web > "Certificate of a website named like the server host name" (#7093). "Off" (default) installs the certificate into the website as before 3.3.3 and leaves the server certificate files and links set up by the administrator as they are. "Server certificate" is the behaviour of 3.3.3. "Website certificate" installs the certificate into the website and links the server certificate files to it. The update selects "Server certificate" on servers where 3.3.3 already linked the website to the server certificate, and "Website certificate" where the server certificate files were links to the website, which 3.3.3 turned into a loop of links; the update repairs that loop with the certificate that acme.sh keeps for the website. - A new MySQL database record whose database already exists on the server is removed again by the server, with a warning in the log; the existing database is not changed and gets no grants. Add the database record first and import the data afterwards (as the Migration Toolkit does). Renaming a database to the name of an existing database is refused, the record keeps its old name. - A MySQL database user whose account already exists on the server with another password gets no grants and no password or name change, with a warning in the log; the existing account is not changed. Add the database user in ISPConfig instead of creating the account by hand. Renaming a database user to the name of an existing account is refused, the user keeps its old name. - PostgreSQL databases: read-only users now get read access to the tables, views and sequences of their own database (also to those the owner creates later) instead of the role `pg_read_all_data`, and only the owner and the users of a database connect to it. The update changes the existing client databases and read-only users. Tables created by a role other than the database owner need a manual `GRANT SELECT` for the read-only user. The rules for existing databases and accounts above apply to PostgreSQL databases and roles as well, and `postgres`, `template0` and `template1` are not allowed as database names. - nginx: the nginx directives of a website and the nginx directive snippets are written into the vhost as text. Template tags such as `` or `` in them are no longer processed; nginx refuses a vhost that contains them and the previous vhost stays active, so remove such tags from the directives and snippets. The placeholders `{DOCROOT}`, `{DOCROOT_CLIENT}`, `{DOMAIN}`, `{FASTCGIPASS}` and the location markers `##merge##` and `##delete##` work as before. - nginx directives: the directives that set the paths of temporary files (`client_body_temp_path`, `proxy_temp_path`, `fastcgi_temp_path`, `uwsgi_temp_path`, `scgi_temp_path`) are no longer accepted for websites. A custom list `security/nginx_directives.blacklist.custom` replaces the shipped one and needs the same addition. - System mail: the certificate of the SMTP server is now also checked with STARTTLS (as it was with SSL), except for an SMTP server on localhost. A new setting under System > Interface Config > Mail accepts self-signed or invalid certificates. The update turns it on for installations that use STARTTLS to an SMTP server other than localhost, so their mail keeps working; turn it off once the SMTP server has a valid certificate for the host name in the settings. - PostgreSQL databases: the users of a deactivated database can no longer log in (their open sessions end) until the database is active again; the same applies to a user that is replaced by another one. The data stays unchanged. - System mails sent by SMTP use SMTP line ends, and lines of the text that start with a dot keep it. - Websites: clients and resellers can choose only the website's own domain, its alias domains and subdomains as SSL domain, as the form offers. A stored SSL domain stays valid. - Databases and database users: when the prefix ends with a digit (as the default `c[CLIENTID]`), the panel refuses a new name, or a changed name, that starts with a digit. Existing names stay unchanged; the remote API is not affected. - PostgreSQL databases: when ISPConfig removes the `pg_hba.conf` lines of a database user, lines whose database or user field is an unquoted keyword such as `all` or `replication` stay in the file. - FTP: the daily FTP log job no longer makes the pure-ftpd log files world-readable; it removes the read access for other users from the files in `/var/log/pure-ftpd`. - Rspamd: the controller (web interface and `rspamc`) asks for the password also for requests from the server itself; use `rspamc -P ` for commands that change data. ISPConfig adds `secure_ip = [];` to `/etc/rspamd/override.d/worker-controller.inc`, unless that file sets `secure_ip` already. - Mail: the update makes the relay host password map `/etc/postfix/sasl_passwd` and its indexed copies readable by root only. The installer and the update no longer make the mail, syslog and ClamAV log files readable for all users. - nginx: with a single address set for the apps vhost (System > Server Config > Web > Apps-vhost IP), the apps vhost listens only on that address and no longer also on all IPv6 addresses. An IPv6 address can be entered with or without brackets. - Shell users: the directory can no longer contain spaces. A shell user with such a directory keeps working; correct the directory when you save the user again. - Remote API: the REST endpoint `remote/rest.php` was removed, it answered every request with an error. Use the SOAP (`remote/index.php`) or JSON (`remote/json.php`) endpoint; the update deletes the files. - Installer and update: the MySQL admin credentials are passed to the mysql command line tools (mysql, mysqldump, mysqlcheck) in a temporary option file readable only by root instead of on the command line. - Update: the dumps of the ISPConfig and PowerDNS databases that the update writes into the install directory are readable for root only. - Backups: the download of a Borg backup prepares the files in a new temporary directory that only root can access and removes it afterwards, also when the download fails. - Virtual servers (OpenVZ): the action page (start, stop, restart, create OS template) only works for the virtual servers the user may change. - Virtual servers (OpenVZ): the DNS record of a virtual server is only created in a zone that the user may change; administrators can use any zone as before. - Statistics (GoAccess): the report is created in a temporary directory and copied into the stats folder of the website as the website user. - Websites: the error pages are copied into the `error` folder of a website only when it is a real folder; otherwise the server writes a warning to the log. - Websites, shell and FTP users: the server writes the files in the folders of a website (password and `.htaccess` files of protected folders and statistics, PHP starter scripts, WebDAV password files, the `.profile`, `.bashrc` and `authorized_keys` of shell users) and creates the folders in them (FTP directories, protected folders) as the website user. This needs `sudo` on the web servers. - Only administrators can add a website, alias domain or subdomain named like the host name of a server. Clients and resellers get the message that the domain already exists. - Extensions are installed and updated without confirmation only when their package is signed with a trusted key of the ISPConfig extension repository. For a package without such a signature, confirm the install or update with "Install anyway" or "Update anyway" in System > Extensions, or add `--allow-unsigned` to `ispc extension install` and `ispc extension update`. The reason and the confirmation are written to the system log. - System > Server Config, System > Interface > Main Config and the additional PHP versions check paths, host names, ports and lists more strictly. A stored value that does not pass the new checks is kept when the form is saved without changing it, and the panel shows a warning for it; please correct such values. The login page shows the custom login text as plain text, HTML in it is no longer interpreted. ### Bugfixes - Fixed intermittent "CSRF attempt blocked" errors when saving a form in the control panel. Two requests of the same login that ran at the same time (for example a slow page and a click on a form) could overwrite each other's session data, so the security token of the form was lost. Requests of one session now run one after the other, like with the PHP file sessions; a request waits at most 10 seconds. Form tokens are now valid for 24 hours instead of 1 hour, so a form that stays open for a long time can still be saved (#7041) - Fixed the news feed in the left navigation of the dashboard failing to load with an error 500 on PHP 8 when the feed contains Unicode characters such as emojis. The bundled SimplePie library called several helper functions statically that were not declared as static, which PHP 8 no longer allows (#7059) - Fixed the "Web server config" dropdown of alias domains and subdomains (vhost) being empty when logged in as admin. The form did not determine the server of the parent website, so the directive snippets were loaded for an empty server type. The form now always uses the server of the parent website for alias domains and subdomains, also for clients and resellers with several web servers (#7062) - Fixed three issues in the extension framework that prevented extensions from creating their own database tables. The install, uninstall and migration SQL files of an extension were run as the ISPConfig database user, which has no CREATE, ALTER or DROP privilege, so any CREATE TABLE failed with "CREATE command denied". They now run with the MySQL root credentials from mysql_clientdb.conf, like the SQL files of the ISPConfig updater. Successful SQL runs, migrations and master grant registrations were logged with the undefined constant LOGLEVEL_INFO, which aborted the installation with "Undefined constant LOGLEVEL_INFO" right after the SQL had been loaded, and also the uninstallation of extensions with master grants. The root credentials for applying master database grants were never read because of an operator precedence error around include, so the grants were only applied by the next ISPConfig update or setrights.php run (#7063) - Fixed install.php and update.php retrying forever when run with --autoinstall and a MySQL login fails, for example because of a wrong password in the autoinstall.ini file. As the answers are read from the file, each retry used the same credentials, which caused a flood of failed root logins on the MySQL server, on a slave server also on the master. The installer and updater now print the connection error and exit with status 1 in autoinstall mode. This applies to the local MySQL server and the master server. An invalid value for a y/n or selection question in the autoinstall.ini file now also stops the installer with an error instead of looping silently. The interactive mode still asks again. On PHP 8.1 and newer, a failed login to the local MySQL server aborted the installer and updater with an uncaught mysqli_sql_exception instead of asking for the password again, this has been fixed as well (#7065) - Fixed the MySQL root password being stored wrong in mysql_clientdb.conf when it contains a double quote ("). The value was escaped with addslashes() but written into a single-quoted PHP string, so the double quote was read back with a leading backslash and the root login of the updater and the server scripts failed. Only the characters that need escaping in a single-quoted string are escaped now, which also applies to the MySQL hostname and username in that file (#7064) - Fixed a slave server losing the connection to a master database server that requires SSL after an ISPConfig update. The update rewrote config.inc.php with dbmaster_client_flags = 0 and could not log in to the master itself, as the master connection of the updater did not use any client flags. The updater now keeps the existing dbmaster_client_flags and db_client_flags values and uses the master client flags for its own connection to the master. Custom config.inc.php.master templates in /usr/local/ispconfig/server/conf-custom/install/ are used as they are, so they need to be updated manually to keep the flags. Joining a new slave server to a master that requires SSL during installation is not supported yet (#4606) - Fixed authentication failures for mail passwords containing non-ASCII characters such as umlauts, set through the mailbox form or the remote API. The password was converted to ISO-8859-1 before it was hashed, while mail clients send the password as UTF-8, so Dovecot could not verify it. The password is now hashed as UTF-8, like passwords set through the mail user self-service. Existing hashes are unchanged, affected passwords must be set again after the update (#7066) - Spamfilter whitelist and blacklist: the recipient (mailbox or domain) must be one the user may change. Reported by kta1kri (#7070) - Data log history: the undo of a change needs the security token of the panel. Reported by Alexei Khairov - Website IP addresses: the panel and the remote API accept only the IPv4 and IPv6 addresses of the website's server that the user may use, and the server writes only valid IP addresses into the web server configuration. Reported by Saad ZITOUNI - Website domains, alias domains, subdomains, redirects, web folders and protected folders: the server checks the values before it writes them into the web server configuration. A website with an invalid value keeps its current configuration and the server log shows a warning; an invalid alias or subdomain is left out of the configuration. - The document root, PHP open_basedir and Apache AllowOverride of websites must be a valid path list or AllowOverride value. Stored values that do not match are kept when they are saved unchanged (with a warning in the control panel). - The control panel login log (auth.log) writes each login attempt on one line. - XMPP domains: the domain admins, MUC admins, MUC name and pastebin trigger are checked in the control panel, and the server writes them as escaped strings into the Metronome configuration. - Email white- and blacklist: clients create entries with the action REJECT (blacklist) or OK (whitelist) and no sender entries in the whitelist; administrators and the remote API can use the Postfix access actions OK, REJECT, DUNNO, DISCARD, HOLD, DEFER and reply codes. See docs/Remote_API_changes.md - Mail domains: clients can change the relay host settings only with the relay host permission and when the per-domain relay options are enabled; relay host, user and password are checked. See docs/Remote_API_changes.md - Virtual servers (OpenVZ): host name, name servers, capabilities, features, iptables modules, resource limits and custom config lines are checked in the control panel and the remote API, and the server writes only a valid configuration. See docs/Remote_API_changes.md - Form values that are checked against a pattern no longer accept a trailing line break. - Email filters: the target folder must be a folder name below the mailbox (no leading /, no empty, . or .. parts). - Virtual servers (OpenVZ): OS templates are created by administrators only, and the server does not replace an existing template file. - DNS: TXT, DKIM, DMARC and SPF data must be valid quoted strings, and the server leaves records with broken quoting out of the zone file (with a warning). NAPTR replacements, zone origins, the allow-update list (IP addresses, networks, key names and ACL names), CAA data, the CA issuer and the values of DNS templates are checked. See docs/Remote_API_changes.md - Mail domains: the DKIM public key is always derived from the private key, also for the remote API, so an own new private key gets its public key (#7091). See docs/Remote_API_changes.md - Mail transports: the destination is checked for its type, the type custom is available to administrators only (existing custom transports of clients are kept). See docs/Remote_API_changes.md - Spamfilter policies and spamfilter users: quarantine destinations, address extensions, admin addresses, banned rule names and the user email are checked. See docs/Remote_API_changes.md - Mail: mailbox paths, uid/gid, IMAP prefix, maildir format and custom rules, content filter rules, forward destinations, alias domain destinations, white/blacklist sources and relay recipients are checked, also for the remote API; stored values are kept when they are saved unchanged. See docs/Remote_API_changes.md - Websites: SSL certificate, key, bundle and CSR are checked when they are saved; WebDAV directories, FTP limits, website ports and admin group names are checked; auto alias names that are no host names are left out of the vhost (with a warning). - Fixed the default values of the client, reseller and client template limits in the forms not matching the values new records get. - Fixed a new OpenVZ virtual server not being saved with the preset boot order 0. - Fixed Rspamd not DKIM-signing mail from a "send as" alias in another domain when the sender login check (reject_sender_login_mismatch) is on (#7086) - The installer can join a multiserver setup whose MySQL master requires SSL (expert mode question, autoinstall key mysql_master_ssl) (#7067) - Fixed the nginx stats folder protection (#7087) - Fixed Tools > Resync logging the SQL error "Table 'dbispconfig.mail_relay' doesn't exist" and not offering the mail relay recipients (#7085) - Fixed the help text of the DMARC aggregate report address: aggregate reports cover all messages of the domain (#7084) - Fixed the database quota notification comparing the quota of a database with the size of a database with the same name on another server (#7082) - Fixed "Reconfigure Permissions in master database" of the update failing on a master with a database name other than dbispconfig (#7079) - Fixed system mails (OTP codes, password reset, notifications) to the administrator address getting a Reply-To that equals the recipient, which spam filters score high; the Reply-To is only set when it differs from the sender and the recipient (#7078) - Fixed new shell users without jailkit getting the keys of root's authorized_keys regardless of the server setting; all new shell users now get only the keys of the "authorized_keys template for new shell users" setting (System > Server Config > Jailkit), which is empty on new installs. Updated servers keep their setting: check it, and check existing shell users for administrator keys copied earlier (#7076) - Rspamd no longer DKIM-signs mail that is sent on the server without SMTP authentication (e.g. PHP mail() of websites); the new Mail setting "DKIM-sign local mail" turns it on again. Websites that need DKIM-signed mail send it through authenticated SMTP - Fixed the {VEID} placeholder in the host name of an OpenVZ virtual server saved in the panel not being replaced - Fixed email white- and blacklist entries not being saved when source and type were unchanged - Fixed long DNS TXT records being split inside an escape, SRV records being built from unchecked weight and port values, and the rendered zone of a DNS zone being overwritten by the form; the DNS wizard offers clients only visible templates; DNSKEY records are no longer imported - Fixed mail transports: a stored transport smtp: or an error text with a colon changed when it was saved again - Fixed email filters on maildrop servers: rules for the size, the domain and the local part were incomplete; regular expression rules are refused for maildrop servers - Fixed the Email Routing menu of clients being shown only with the white/blacklist permission, and the XMPP registration URL, registration message and SSL state being ignored - Fixed a custom Sieve filter that does not compile replacing the working filter of a mailbox; the previous filter is kept and the server log shows a warning - Fixed the acme.invalid check of website certificates reading the old certificate file, URL cron jobs breaking on %, and reseller email addresses with + being refused - Removed the unused admin pages IPTables and default theme, the mail_spamfilter forms and unused DNS validator functions; the update deletes the files - Fixed the Pure-FTPd SNI plugin not restarting Pure-FTPd after the certificate of a website changed. It called a service that was not registered, so every certificate update logged "Unable to restart pure-ftpd-mysql. Service not registered." and Pure-FTPd kept the old certificate. Pure-FTPd is now restarted once at the end of the server run (#7083, #7075). A restart of a service that is not registered no longer adds a PHP warning to the cron log - Fixed the utf8mb4 conversion of the database stopping at the first table that could not be converted (old MyISAM tables on MySQL 8, zero dates with a strict SQL mode), so many tables stayed utf8mb3. The update now converts the remaining tables (MyISAM tables become InnoDB), keeps the collation of databases that are already utf8mb4 and lists tables it could not convert. New installs create all tables as utf8mb4 (#7072) - Fixed Rspamd greylisting mail of recipients with greylisting off when the spam score reached the tag level; greylisting off now skips the greylisting check completely, also for whitelisted senders. The Rspamd settings files of existing mailboxes and spam filter users are rewritten when the records are saved, or with Tools > Resync > Mailboxes and Mailfilter after the update (#7071) - PHP-FPM pools of websites and of the panel use a listen backlog of 4096 for all PHP versions (PHP up to 8.1 used 511), as PHP 8.2 and newer do by default (#7050) - Fixed PostgreSQL databases and users no longer being created when the file /usr/local/ispconfig/server/lib/postgresql_clientdb.conf was missing while the PostgreSQL role ispconfig existed, for example after a reinstall. The file was written with a new password that the role never got; now the existing role gets the new password, and the pg_hba.conf lines for ispconfig are only added when they are missing - Fixed `ispc extension list` showing the description of the previous extension for an extension without a repository entry, and listing nothing when the extension repository could not be reached - Fixed the remote actions extension_list and extension_available stopping the server script; they are removed, as nothing uses them - Fixed deleting a client removing the wrong group from a user. The remote function client_delete_everything did not remove the group of the deleted client from its reseller, and removing a group from a user who did not have it removed the first group of that user instead, for example a group of the admin user when a client of the admin was deleted - Fixed changes of the relay host in the server config. The entry of the old relay host stayed in /etc/postfix/sasl_passwd in some cases, several changes at once added the same entry several times, and every change replaced smtp_sasl_password_maps with the sasl_passwd file only, so the relay hosts with authentication of mail domains no longer worked; the other password maps are now kept, and SASL authentication stays on while they are configured - Fixed jailkit programs: after a program with a prohibited path (such as /tmp) all following programs of the list were skipped and not copied into the jail - Fixed an update of a jailkit shell user creating .bash_history, .profile, .bashrc.d and .local in the document root of the website instead of the home directory in the jail. Files that earlier versions left in the document root are not removed automatically - Fixed the installer replacing a Let's Encrypt certificate for the server that acme.sh had just issued with a self-signed one when certbot is installed as well - Fixed the nginx PageSpeed option of a website adding the PageSpeed configuration also when the nginx directives of the website configure PageSpeed already - Fixed nginx folder directive snippets creating their folder next to the web folder of the website (for example webshop instead of web/shop) - Removed the placeholder {PHPFALLBACKFASTCGIPASS} from the nginx directive help in the panel; it was never replaced, and nginx refused a vhost that used it - Fixed OpenVZ virtual servers: the values of the VM template were not copied to a virtual server, and on new installations the advanced tab and the remote functions openvz_vm_add and openvz_vm_update failed on the column iptables (the update renames the column) - Fixed PostgreSQL databases: after a change of the read/write user the tables, views and sequences of the database now belong to the new user, and other databases of the old user keep their owner - Fixed the FTP traffic statistics counting the traffic of the pure-ftpd log several times; the daily job now only counts the lines added since its last run - Fixed the server script stopping at the delete of a vhost subdomain or vhost alias domain whose website was deleted before (for example when a client and all its records are deleted); no later change was applied on that server - Fixed vhost subdomains and vhost alias domains added through the remote API: they now get the document root and system user of their website - Fixed OpenVZ virtual servers: a change of the VM template now copies the values of the template to the virtual server, a change of the OS template no longer overwrites them - Fixed a custom php.ini setting without a name (a line such as `= value`) stopping PHP-FPM: PHP-FPM refused its whole configuration, so all websites with that PHP version failed after the next restart. Such lines are no longer written into the pool, and the website form refuses them - Fixed clients not being able to create XMPP domains (the check of the allowed XMPP servers always failed) - Fixed the SSL certificate of an XMPP domain on a slave server not being stored in the master database. Run the update on the master with "Reconfigure Permissions in master database" to add the missing permission - Fixed the Metronome setting for the creation of chat rooms of an XMPP domain: the host configuration got the stored value (n/m/y) instead of false/member/true - Fixed the spamfilter whitelist and blacklist pages changing or deleting an entry of the other list - Fixed the duplicate check of CAA records, an existing CAA record can still be saved unchanged - Fixed the error messages of the DMARC record page for invalid report addresses, they now name the address - Fixed the DNSSEC information of a DNS zone being overwritten when the zone is saved in the panel - The SPF form lists the policies from strict to open (-all, ~all, ?all, +all) and a new SPF record starts with ~all instead of +all (#7090) - DNS zones whose name starts with an underscore (e.g. `_acme-challenge.example.com`) can be saved again, also to enable DNSSEC (#7089) - DNS records can only be added to a DNS zone that the user may change, read access to the zone is not enough - A website with a PHP version that is no longer active, or that has no settings for the PHP mode of the website, now shows the error "PHP Version is invalid." on saving instead of switching to the default PHP version silently - Fixed the wrong directive snippet being selected when the list of snippets is reloaded in the website form - Fixed a domain added by a reseller in the domain module getting no client group when the selected client could not be used, the domain now belongs to the reseller - Fixed the reseller select of the client form: the current reseller stays selected when it is no longer a reseller, and the client itself is not offered - Fixed saving the CAs in System > Main Config > DNS CAs: the name, issuer and the checkboxes for wildcard, critical and active are saved, and the tab no longer writes an empty section into the system config - Fixed vhost alias domains being switched off in System > Main Config while vhost alias domains exist - Fixed saving a remote user removing the functions of modules that the admin user does not have in its own module list - Virtual servers added through the remote API (openvz_vm_add) are set up as in the panel: VEID, VM template values, IP addresses and OpenVZ config. See docs/Remote_API_changes.md - Websites added through the remote API without php_fpm_use_socket use the PHP-FPM socket, as in the panel - Mail filters with an invalid regular expression are refused; such a filter added through the remote API never matches instead of stopping all Sieve filters of the mailbox - Fixed white- and blacklist entries of client IP addresses and hostnames having no effect on Rspamd servers - A message to a client circle without members is sent to nobody (before: to all clients) - Fixed client_update through the remote API without a new password making the client password unusable - The version check of the dashboard waits at most 5 seconds when the ISPConfig download server can not be reached - Fixed the mails of an mdbox mailbox not being moved to the new maildir when the maildir changes - Fixed the RAID monitor not reporting degraded or failed arrays of 3ware, HP, MegaRAID and Adaptec controllers - PostgreSQL database names are limited to 63 characters including the prefix - Fixed the size of PostgreSQL databases with upper case letters in the name not being recorded - The ISPConfig import tool reports mailboxes imported without a password - Fixed the server selection of the ISPConfig import tool being empty after connecting - Fixed DNS record forms storing a record type other than their own - Fixed update_serial of the DNS record functions of the remote API requiring the zone functions; see docs/Remote_API_changes.md - Fixed update_record_permissions of the remote API changing only one of several matching records on the servers; see docs/Remote_API_changes.md - A locked client can no longer delete items - Fixed PHP 8.5 deprecation notices for (double) casts - Fixed nginx leaving the log mounts of a website behind when the website is deleted or moved - Fixed server.php stopping when the record of a server is deleted - Fixed extension license updates not reaching the server on servers installed with ISPConfig 3.3.0 or newer - Fixed the groups of deleted clients and resellers staying on slave servers - Fixed the PHP link of shell users on websites with the default PHP, and the PHP deprecation messages it logged (#7074) - An update of a shell user keeps the user's ~/.profile - Fixed jail directories being created with wrong permissions - authorized_keys of shell users ends with a newline - Fixed errors in the log when the password of a database user changes together with its remote hosts - Fixed changes of folder protection users and shell users touching users whose name ends with the same name - Fixed the installer removing the wrong lines from configuration files (e.g. freshclam on CentOS) - Fixed server.php and security/check.php stopping with a fatal error when the database connection fails - The updater warns when it can not store the service flags of the server - The Let's Encrypt pre-check of the hostnames gives up after a timeout - Saving a tab of the server settings keeps the settings of the section that have no form field - The client selection of a new website follows the domain module setting for administrators - Fixed the backup retention of a database deleting the backups of other databases with the same name prefix - Fixed backups with "etc" in their path that could not be restored, downloaded or deleted - Borg repositories shrink when backups are deleted - Fixed the website quota during a root restore (ext4 and XFS) - The extension page offers an update only for a newer version - `ispc extension` ends with exit status 1 on errors and can disable, enable and uninstall extensions without the repository - License keys can be set for extensions with "_" in their name, and the extension installer stops on a failed unzip - The warning about the hidden default PHP version of a website is shown - Fetchmail accounts follow a renamed mailbox and are deleted with it, mail filters are deleted with the mail domain - Deleting a mail filter keeps the indentation of the custom Sieve rules - The DNS zone import reads record TTLs with units (e.g. 1h, 2d) - Unlocking a client restores the previous owner of its records - MX and NAPTR priorities above 65535 are refused; A, AAAA, HINFO and SRV names may be up to 255 characters; TLSA names like _443._tcp are accepted - Customer number templates of resellers may contain digits - A client password sent back as the stored hash through the remote API no longer locks the client out - Getmail accepts destinations with punycode top-level domains - Website, subdomain and alias names with empty labels (e.g. a..b.com) are refused; the web folder of a subdomain may have one character - The SOA admin address keeps dots of its local part (first.last@...) - Secondary DNS zones accept networks and any in the transfer list - Fixed the mail queue, Let's Encrypt log, MySQL, POP3/IMAP and firewall monitors - A failed web server restart after a website change shows an error on the website - The cron frequency limit of clients is checked against the whole schedule (weekly and monthly jobs are allowed) - Web folder paths with .. are refused - server.php no longer stops when a website is deleted before its WebDAV or shell users are processed - Deleting a cron job keeps the domain in the other cron jobs of the website - Fixed client updates through the remote API switching websites of the client on again - An additional client template that is still in use can not be deleted - The DNS zone import reports records outside the zone, refuses a zone file of another domain and keeps the case of TXT data - DNS templates are checked when they are saved; the DNS wizard reports a broken template instead of stopping - sites_database_add and sites_database_update no longer fail with the backup format parameters - Fixed the tables of an extension being registered twice - Fixed monitor data: ISPConfig cron log escaping, stale mailbox quota and database size data, network rates and memory of the system usage - Fixed the website quota of multiserver setups being read from another server - The FTP traffic statistics in the remote API return values - The monitor keeps the selected server, the job queue lists the entries for all servers and of the master of a mirror - Removed the broken delete button of the job queue - Resync of mail transports, relays, filters, fetchmail accounts and mailing lists uses the selected server - Fixed searches in lists with extra conditions (e.g. support messages) - Deleting a mailbox no longer deletes the backups of mailboxes whose ID starts with the same digits - Changing the backup format of a website keeps the backup interval of its databases - A web backup is only restored on the server of the website - IPv6 addresses of a server are compared independently of their notation - The firewall ports accept spaces and refuse text before the first port - An IP mapping of a mirror can not be added twice - Clients without backups in their limits no longer see the backup interval of databases - Deleting a mail domain on a multiserver setup removes it on the master - Starting a backup in the panel needs the edit permission of the website - A failed database dump of the system backup is reported and no longer replaces older backups - Fixed the error pages and the standard index page of websites on servers with the language ja, el or ar - The installer accepts autoinstall languages like en_US - The disk usage monitor converts all units - The dashboard search treats % and _ as text - Renaming a PostgreSQL user no longer adds pg_hba.conf lines for MySQL databases - mdbox mailboxes with an IMAP prefix get their default folders with the prefix - Fixed the resync of database users and `ispc resync client` - Fixed German texts of the DNS wizard - The duplicate check of CAA records looks in the zone of the record - The server settings refuse a relative backup directory - The admin IP whitelist stays readable for the panel after an update - The addresses of the mirror servers are added to the remote access of a database - The limits of child domains and database users are also checked when the form is saved - Status changes of mail domains and DNS zones through the remote API reach the servers - PowerDNS: TXT records are written quoted and HINFO records keep their blanks - The `[update]` section of an autoinstall file takes precedence in update.php - The installer writes database passwords with backslashes or single quotes correctly into config.inc.php - A failed rename of a MySQL database keeps the old database and name - Failed extension actions are reported as failed, errors of an earlier action are cleared - Moving a website to another client also changes the owner of its subdomains and alias domains - A changed document root moves the FTP and shell user folders and the open_basedir paths below it - Fixed the check of active websites when a directive snippet is disabled - Fixed the IP detection of the installer on slave servers - The domain limit of the domain module is also checked when the form is saved - A failing cron job of the server no longer stops the other jobs - Extension repository: invalid catalog answers, dependency lists as arrays and dependency cycles are handled - Let's Encrypt: names with a wildcard are left out of the certificate request with a warning - The database name and user prefixes accept only the supported placeholders - Moving a website to another client removes the link in the folder of the old client - The DNS wizard refuses a zone that exists already - Domain names with an empty part after the last @ no longer give an error in the IDN conversion - Deleting an alias domain or subdomain whose website is gone no longer gives PHP warnings - The cleanup of soft-deleted mailboxes no longer looks outside the mail home with an empty home path - install.php and update.php stop with exit status 1 when the autoinstall file is missing - Mirror servers keep their jailkit update state of websites - Fixed PHP warnings in the nginx, postfix and mail quota code - The jk_socketd.ini entries of deleted jails are removed - useradd no longer creates home directories for website, cron and shell users (RHEL-like systems) - The file checksum list of install and update uses the 24-hour clock in its name and mode 0600 - Deletes replicated to a slave no longer fail because of an earlier SQL error - The datalog cleanup keeps entries a mirror server has not processed yet - server.php logs an error when it can not read the datalog of the master - Server modules are loaded in name order - `ispc` refuses invalid module names - Deleting a mailbox with the maildeliver plugin removes the Sieve file in the maildir of that mailbox - Unsubscribed default mail folders are no longer subscribed again on every mailbox update - A failed nginx config test or reload is logged as a warning - The Postfix client access list only uses entries of its own server - The automatic CAA record of a wildcard website gets a fully qualified name - Fixed PHP warnings in the PHP binary detection and Let's Encrypt key type selection - certbot gets the key type explicitly, a key type in the certbot cli.ini no longer changes the certificate type - The update counts only the configured web server as installed - Removed the deprecated curl_close() calls for PHP 8 - The group, passwd and shadow files written by ISPConfig end with a newline - Added missing error texts of the FTP, shell user, website, spamfilter and DNS template forms - server.php and cron.php stop with a warning when a database is not reachable - The installer functions report write errors instead of a PHP error - Only one update can run at a time on a server - Apache: the SAN of a CA-signed SSL certificate is the domain of the website - Pure-FTPd SNI uses the certificate of the SSL domain and Let's Encrypt certificates - nginx stores the key of a generated SSL certificate in the website, as Apache does - A successful Let's Encrypt request only clears the SSL fields of websites that use Let's Encrypt - awstats statistics stop with a warning when the awstats scripts are missing - Commands with a lot of output no longer hang in pipe_exec() - Fixed PHP warnings in the ispc table output - Website quota commands no longer run in the background on Debian and Ubuntu - Renaming a mailbox also updates forwards with several targets - Errors of a datalog entry processed by several servers are logged for each server - The database usage is matched per server when several servers have a database with the same name - A failed rename of a MySQL user or PostgreSQL role is logged, pg_hba.conf keeps the old entries - A failed XFS quota limit is logged as a warning - A subdomain or alias website whose parent website is gone no longer breaks PHP-FPM - Database quotas are enforced for databases on slave servers: the master sets the quota flag from the monitor data of all servers - The installer always sets the given admin password; the autoinstall samples default to a random password - Install and update warn when the Perl module Date::Format for vlogger is missing on Apache servers - Log folder bind mounts are no longer stacked when a website is updated again - The placeholders [website_idhash_2] to [website_idhash_4] give 2 to 4 levels also on a client change (new website paths follow the configured layout) - The installer asks before requesting a Let's Encrypt certificate for a hostname without public DNS records - nginx servers with Pure-FTPd get the file service on install; the update warns when it is off - Client passwords with a backslash work for the panel login - The phpPgAdmin button is shown for PostgreSQL databases in the database list - The restore of a damaged website backup archive stops with an error and leaves the website unchanged - The database quota is shown in the same unit the server uses for the quota check (1 MB = 1024 × 1024 bytes) - install.php and update.php read the answer file given with --autoinstall, also when an autoinstall.ini exists in the install directory - nginx: Let's Encrypt certificates for new websites and new alias domains include all names (before: names that nginx did not serve yet were dropped) - The system log shows the last output lines of certbot or acme.sh when a Let's Encrypt certificate could not be issued - The web server is reloaded after certbot renewals done by the certbot timer of the distribution - When acme.sh and certbot are both installed, unused certbot certificates are also removed by the Let's Encrypt cleanup - New certbot accounts are registered without an email address (before: the webmaster address of the first website) - Database backups only include the active databases whose backup interval is due; a database with the interval "none" is no longer backed up because another database of the website is due - The backup cleanup on a multiserver node no longer deletes backup records of other backups on the master - A client with full permissions on a website created by the reseller can save the main tab of the website - Saving a website, DNS zone, mail domain or database user as reseller keeps the client protection set by the admin - The client protection setting applies to all client websites created by admin users or through the remote API - The old spamfilter server config pages (no menu entry since years) were removed; use System > Server Config - A new or updated slave server takes the system settings (System > Main Config) from the master - Jailkit: the hard link setting of the server applies to all jails and to the jail maintenance, and jails are no longer updated without a change; the nightly bash check of the maintenance no longer fails for every jail and rebuilds it (#7073) - The jail maintenance waits while the server is processing changes - Saving the mail server settings keeps the Postfix sender restrictions list; the sender blacklist check of the panel comes before permit_mynetworks again - Rspamd: the greylisting of a mailbox or forward without its own spam filter policy is applied - The spam filter policy form has the Rspamd greylisting checkbox again - PostgreSQL databases: pg_hba.conf of the running PostgreSQL server is used and its configuration is reloaded through PostgreSQL (all distributions) - The security check counts the admin users only on the master or a single server - EL: the update keeps the TLS and passive port settings of pure-ftpd.conf - The package update check of the monitor no longer blocks the cron jobs while apt or dpkg is in use, and a failed check keeps the last result - Deleting a shell user of a PHP-FPM website no longer restarts PHP-FPM - The installer uses the Debian 13 configuration for unknown newer Debian versions; Debian testing gets PHP 8.4 paths - The installer keeps own rules in the local AppArmor override of BIND - A folder protection user that is moved to another protected folder is removed from the password file of the old folder - System mails sent through SMTP: a mail that the SMTP server refuses (login, sender, recipient or message) is no longer reported as sent, the answer of the server is written to the log; without an SMTP user no login is sent - PHP-FPM reload through incron: the incron line reloads the PHP-FPM service of the website's PHP version, and a missing incron service no longer stops the processing of the server - Commands of the server and of the installers that discard their output now run in the foreground also when sh is dash, so their result is checked - Postfix: a non-numeric mailbox or message size limit in the server settings no longer stops the mail server configuration - New installations store the Rspamd Redis passwords under the setting names the panel uses - The check of the Postfix virtual uid/gid maps setting counts the mailboxes of the server that is edited - A domain name that can not be converted to its ASCII form (e.g. a leading or trailing hyphen or an empty label) is refused with an error instead of being saved as an empty value - Correct error texts for the BOSH inactivity time and the Jailkit settings ### Other Improvements - Cleanup Remote API code (#7069) - Deleting a mail domain also deletes its mailing lists on the server - The FTP, WebDAV and shell user limits of clients are checked when the form is opened and saved - Missing error texts of the FTP user, protected folder and folder user forms were added - Passwords with a backslash set in the forced password change work for the panel login - Backup actions started in the panel (backup now, mail restore) show an error when they fail - A website restore leaves the backup excludes of the website untouched (before: the restore deleted them) - Failed Borg database backups and restores are reported as failed; a failed database backup no longer moves the whole Borg repository aside - A remote backup action no longer unmounts the backup directory while a backup runs - An extension cannot be uninstalled while an installed extension depends on it - The installer of an extension can stop its install or update - An extension update removes the files the new version no longer contains - Mailbox traffic statistics also count Rspamd servers and the rotated mail log; the last day of a month is counted in its own month - Resellers and clients can switch off CGI, SSI, Perl, Ruby, Python, SuExec, error documents, SSL and Let's Encrypt of a website when their limits allow it - Renaming a mail domain updates the spam filter settings of the new domain name and keeps its policy when the form sends none - FTP users and protected folders cannot be moved to a website on another server - The cron job limit of resellers is checked when a cron job is added - Deleting a client or reseller also deletes its WebDAV users, mail transports, spam filter policies and protected folders - The check before removing a server from the server list of a client counts all websites, DNS zones, databases and mail domains of the client (before: only the records the client created itself) - Chrooted Apache/nginx: the website user is changed and deleted in the chroot too - Restoring a website backup in a 7z format as the website user works like the other formats - Mail backup actions unmount a mounted backup directory again - Website changes reload Apache (graceful) and nginx instead of restarting them, running requests are no longer cut off - Installer and updater commands on Debian and Ubuntu report failures in the install log - Cron jobs with a step on a start value (e.g. minute 5/15) are written in a form cron accepts - The DNS zone import keeps parentheses, semicolons and blanks inside quoted TXT data and reads records written over several lines - Full names typed without trailing dot in a DNS record of the zone are stored as absolute names (the panel no longer appends the zone again) - IP addresses are refused as targets of CNAME, DNAME, ALIAS, MX, NS, PTR and SRV records and as primary name server of a zone - The size of a mail filter is labelled in MB, and a size that is not a number is refused - The SSH key field of shell users accepts only public keys (one per line, with options and comment lines) - Unlocking a client or reseller switches on only the records the lock switched off - Remote API client functions: assignment IDs for additional templates, fields set by a master template, form defaults for new clients, the login check and country of client_login_get (see docs/Remote_API_changes.md) - Mail log views and the mail statistics use the systemd journal when there is no mail log file - The hourly mailbox login statistics read only the new mail log lines and store the last access with hour precision - Remote actions that no server plugin handles are shown as error instead of done - Failed firewall commands are logged as warning; firewall changes no longer wait one second per port - The OS update from the panel runs without questions, keeps changed configuration files and reports a failure - Remote actions that ended with a warning or error are deleted after 30 days - The metrics dashlet shows the data of the panel server and names it - The PDNS Tupa import was removed - Support messages send their mails only after the message was saved; all admin users see the messages to the administrators - Vhost subdomains and alias domains cannot be switched off in the system settings while such websites exist - A server cannot be deleted while records use it; deleting a server also removes its firewall, PHP version and IP mapping records - An IP address cannot be deleted while a website of the server uses it (remote API: see docs/Remote_API_changes.md) - The backup list shows a backup as encrypted only for the formats that use the backup password (zip, rar, 7z) - The backup defaults of the server settings form match the values of a new installation - New FTP users created by an admin have unlimited file quota, ratios and bandwidths by default - Mailboxes in mdbox format work on Debian 13 (Dovecot 2.4); run the update with "reconfigure services" - Redirect types of the other web server (e.g. after a change from nginx to Apache) give a valid vhost - The IPv6 prefix of mirror servers keeps the host part of compressed IPv6 addresses - Finished remote actions are never run again, also after the action counter file of a server was lost - Monitor data of services that are no longer monitored is removed after 2 days - The quota dashlets of a client show only the client's own websites, mailboxes and databases - A database of a client with a database quota limit always needs a quota - Databases of a reseller's clients count against the database quota of the reseller also when they are added - Databases with unlimited quota no longer lower the free database quota of a client - Deleting a database user writes one delete entry for all servers; moving an alias domain to another website updates the old website correctly - Deleting a website also removes its manual web backups - A vhost subdomain or alias domain moved to another website takes its folder along, the old website is protected again; the new website must be on the same server - Database restores set the definer of views, triggers and routines to the database user of the database - Mail filters, autoresponder and quota work for mailboxes with a mail path other than /var/vmail// (Dovecot 2.3 and 2.4); run the update with "reconfigure services" - The PowerDNS database is created with the MySQL admin account - New installations limit the message size to 50 MB - `ispc resync` without server ID resyncs all servers of a multiserver setup; the help lists the server ID option - The ISPConfig mail import reads aliases, catch-alls and all domains correctly, does not duplicate filter rules and logs out of the remote server - The link in support message mails carries the panel port - RP, DS, SSHFP, LOC and HINFO records are checked for their structure, also for admins; CAA options must match completely - Backups and restores of encrypted zip, rar and 7z formats work with any character in the backup password - A vhost subdomain or alias domain moved to another website no longer leaves its log folder mounted in the old website - A client change of a website with a website path without the client ID changes the group of the website files and of the website user - A client change of a website moves its FTP and shell users, cron jobs, child domains and databases after the website, the new document root no longer ends up as a _bak folder; this also works for a client change in the domain module - Admins can unlock a second factor locked by too many wrong codes (checkbox in the user form; also reset by a new password or a 2FA type change) - Switching on the domain module keeps existing domain list entries - A name server or mailbox without dots in the SOA form is a name in the zone (ns1 becomes ns1..) - Database backup folders on servers without the website user stay owned by root, without a warning - A failing server plugin no longer stops the server run: the change stays queued and is retried, the error names the plugin, and remote actions and service restarts still run - A server module or plugin that can not be loaded (e.g. a broken extension) pauses the processing of changes, remote actions (also disabling the extension in the panel) still run - Changes that can not be read are skipped with an error in the system log; on slaves a change is only marked as done after it was applied - The cron jobs of a website get the cron type of the new client when the website is moved to another client - Saving the server settings no longer switches on the Postfix stress adaptive mode and the PHP-FPM incron reload - Mailbox CSV import addon: duplicates are no longer imported, passwords are hashed like in the panel and not shown in the result - Remote API database user, mail, DNS and web domain functions: see docs/Remote_API_changes.md - Remote API sites, mail backup and quota functions: see docs/Remote_API_changes.md - Switching a server service on or off in System > Server Services links or unlinks its module and all of its plugins; run ispconfig_update.sh with "reconfigure services" to configure the services of a newly enabled role. The server applies further changes in its next run - Jailkit: the [php] section uses the PHP version of the system, new section [php8_5] - Unused server files (cron_daily, mod_mail_base, the old jailkit scripts, ...) were removed, the update deletes them - Mailbox CSV import addon: the first line is skipped only when it is a header, invalid addresses are refused and a mail domain is only created together with an imported mailbox - WordPress addon: the database and user name schemes must contain [ID] - Remote API spam filter policy functions: see docs/Remote_API_changes.md - EL: a new installation enables the configured services at boot - Remote API server_config_set and system_config_set: see docs/Remote_API_changes.md - The system log shows a warning when the disk quota of a website could not be set or when getmail is not installed for Fetchmail accounts - The rkhunter report of the monitor shows the error messages of rkhunter - Only admins can switch a website from the PHP-FPM socket to a TCP port; the update lists the websites that use a TCP port - The option "Resellers can use the option-tab for websites" shows a note that it is meant for trusted resellers only - Changing the own password or second factor in the user settings and the mail user password page needs the current password - Panel sessions end when the user was deleted, deactivated or got a new password; mail users logged in during the update have to log in once again - Remote API login without "Remote Access": only from this server; with "Remote Access" the address list decides (see docs/Remote_API_changes.md) - Renaming a MySQL database moves all tables, sequences, routines and events and keeps the old database when something could not be moved - Renaming a DNSSEC zone removes the keys of the old zone name - Protected folders: the update gives protected folders owned by root to the website user; the server no longer changes the owner of a protected folder - Jailkit shell users: the website root no longer gets an .ssh/authorized_keys file for them; existing copies can be deleted - MySQL: a database user whose password can not be set is removed again; check for database accounts without password left by older versions - Directive snippets need the security setting admin_allow_server_config, like System > Server config - Secondary DNS zones: clients and resellers can use only public IP addresses as primary server - Added an end-to-end test framework in tests/ with Docker test containers. The PHP error reporting level of the control panel and the server scripts can now be set with $conf['error_reporting'] in config.inc.local.php (#7081) Please see changelog for a full list of features and bugfixes: https://git.ispconfig.org/ispconfig/ispconfig3/-/milestones/102 --- ## ISPConfig 3.3.2p1 Released This is a patch release that fixes bugs discovered after the 3.3.2 release. ## What's new in ISPConfig 3.3.2p1? ### Bugfixes - Fixed rspamd not starting after an update to ISPConfig 3.3.2 with reconfiguration of services. The update renames the no longer used /etc/rspamd/local.d/users.conf, but the include directive for that file was only removed from /etc/rspamd/rspamd.conf when it ended with a line break. Older ISPConfig versions appended the directive without one, so on most servers it stayed in place and pointed to a file that no longer exists. The directive is now removed regardless of how it was written. Servers that are already affected are repaired by this update, a manually restored users.conf can be removed afterwards (#7054) - Fixed the hard disk quota monitoring reading the wrong column of the repquota output for a website whose disk soft limit is exceeded. repquota prints a grace time behind the block limits in that case, which shifts the number of files one column to the right. The monitoring stored the grace time instead of the number of files and, on servers with more than one quota enabled filesystem, aborted the whole ISPConfig cron run with "Unsupported operand types: string + string" on PHP 8 (#7053) - Fixed the ISPConfig update not adding the pid column to the sys_cron table on MySQL and on MariaDB versions older than 10.0.2, as the SQL statement used ADD COLUMN IF NOT EXISTS, which only MariaDB supports (#7055) - Fixed database users not being created on MariaDB older than 10.1.3 and MySQL older than 5.7.8, which do not support CREATE USER IF NOT EXISTS. These versions use the previous behaviour again. Changing the name or password of a database user is now only applied on the servers that host a database of that user (#7056) - Fixed mailboxes, email aliases, email forwards and catchalls being created on the wrong server when the same mail domain exists on more than one mail server. The forms now identify the selected mail domain by its ID instead of its name and show the server name for domains that exist on several servers (#7057) Please see changelog for a full list of features and bugfixes: https://git.ispconfig.org/ispconfig/ispconfig3/-/milestones/101 --- ## ISPConfig 3.3.2 Released This release adds support for Ubuntu 26.04, an option to enforce inbound DMARC rules, a separate sender address for system mails, an interface for extensions to add their own client and reseller limits, and fixes a number of bugs reported after the 3.3.1p1 release. A privilege escalation security vulnerability has been found in the Fetchmail function of the Email module. This issue has been fixed in ISPConfig 3.3.2. We thank Arvin Shivram of Brutecat Security for reporting the issue to us (#7052). A SQL injection vulnerability has been found in the update and delete functions of the remote API, which allowed a remote API user to modify or delete records beyond their permissions. This issue has been fixed in ISPConfig 3.3.2. We thank Nguyen Chi Quang from MBBank for reporting the issue to us (#7051). ## What's new in ISPConfig 3.3.2? ### Ubuntu 26.04 Support ISPConfig 3.3.2 adds support for Ubuntu 26.04 LTS, including the Dovecot 2.4 configuration syntax used by that release (#6996). ### Inbound DMARC Enforcement A new option allows to enforce inbound DMARC rules in rspamd, so that incoming mail is rejected or quarantined according to the DMARC policy published by the sending domain (#6995). ### Separate Sender Address for System Mails The e-mail address of the administrator was used as sender address and as recipient address for system mails at the same time. This caused problems with SPF when the mailbox of the administrator is hosted on a different server, as the ISPConfig server had to send mails using an address of a domain that it does not host. The setting has been split into two fields in System > Main Config > Mail: - **Administrator's contact e-mail** (`admin_mail`) is the recipient of system notifications and is used as reply address. - **Server sender e-mail address** (`server_sender_mail`) is the address that system mails are sent from. This affects notification mails like traffic and quota mails, monitoring notifications, OTP and password reset mails, the welcome mails for clients and resellers, and support messages. Custom mail templates in `conf-custom/mail/` that use their own sender address are not changed. The update sets the new field to the current administrator e-mail address, so the behaviour of existing installations does not change until a different sender address is configured (#7028). ### Extensible Client and Reseller Limits Extensions can now register additional client and reseller limits without patching core files. A new limits registry makes the limit fields available in the client and reseller forms and in the client templates (#7019). ### Updated CA List for CAA Records The list of certificate authorities offered for CAA DNS records has been updated to reflect the current trust landscape. Former CAs were removed, CAs that merged or changed their name were updated and new CAs were added (#7017). ### Database Backups Without Table Locks mysqldump locks all tables of a database while it dumps them, so a website can become unresponsive for as long as its database backup runs. A new setting in System > Server Config > Server controls whether the backup is made with `--single-transaction` instead, which does not lock the database. The setting defaults to **Automatic**. In this mode ISPConfig looks at the storage engines of the database and dumps it without table locks when all of its tables use a transactional engine such as InnoDB. A database that contains MyISAM or MEMORY tables is still dumped with table locks, because a dump taken without locks is not consistent for those engines. **Yes** always dumps without table locks, which is the right choice for a mixed database whose availability matters more than the consistency of its non transactional tables. **No** keeps the behaviour of earlier releases (#7049). ### Custom Error Pages Disabled by Default Custom error pages are now disabled by default for newly created websites. Existing websites are not changed by the update (#7021). ### Bugfixes - Fixed the password reset link in the password reset e-mail being built from the Host header of the request, which allowed an attacker to send a reset link pointing to a host under their control to the user. The link is now built from the interface_base_url setting in interface/lib/config.inc.php if set, otherwise from the hostname of the server that runs the interface. If the panel is reached under a different hostname than the server hostname, set interface_base_url accordingly (#7044) - Fixes from the code audit by siteguardian.io (#7044): the user type scope (any/user/admin) of entries in the IDS whitelist and htmlfield files is now enforced, it was ignored before. If you use a custom whitelist (security/ids.whitelist.custom), check that entries for fields that resellers can edit use the user scope. CSRF tokens are now required for backup actions, DNS zone import, extension installation and management, and the vpopmail import. TLS certificate verification is no longer disabled when downloading extensions and APS packages. The session ID is regenerated on login unless session_regenerate_id is set to no in security_settings.ini. Password hashes and CSRF tokens are compared in constant time, the CSRF token timeout is enforced for form submits, e-mail headers are protected against CRLF injection, shell arguments in the PowerDNS DNSSEC, certbot and PostgreSQL size commands are escaped, the APS package extraction rejects paths outside the target directory, and unserialize() calls no longer allow objects. The stale interface/web/remote/monitor.php file from versions before 3.2 is removed by the updater - Fixed the client select field of the website, mail domain, mailing list, XMPP domain, DNS zone, secondary DNS zone, database user, client domain and OpenVZ virtual machine forms falling back to the first entry of the list when the form was redisplayed after a validation error. For a reseller the first entry is the reseller himself, so correcting the reported error and saving again handed the record over to the reseller and, in case of a website, moved the site to a different directory. The field now keeps the client that was selected, or the current owner of the record if the selection can not be determined. A reseller can now only assign a record to himself or to one of his sub clients, other client groups sent with the form are ignored and logged (#7048) - Fixed resellers not being offered the additional PHP versions of the selected client in the website form, and the sort priority of PHP versions being ignored for resellers. PHP versions with the same sort priority are now listed with the most recently added version first, so that a new website defaults to the newest PHP version unless the sort priority says otherwise - Fixed BIND not being able to write the zone files of secondary DNS zones on Ubuntu 24.04 and other systems with AppArmor, as the installer did not detect AppArmor when the apparmor_status command is not available and did not reload the BIND AppArmor profile after adding the rules for the slave zone directory. The rules now also allow file locking. The fix is applied by the ISPConfig update - Fixed a privilege escalation vulnerability in the Fetchmail function of the Email module. The values of a Fetchmail account were written into the getmail configuration file without validation, which allowed a client to inject additional configuration sections through line breaks in the account fields. Line breaks and null bytes are now removed from the values, the destination has to be a valid e-mail address, and the getmail plugin refuses to write or delete a configuration file that is a symlink or resolves to a path outside the getmail configuration directory (#7052) - Fixed a SQL injection vulnerability in the remote API. The record ID passed to the update and delete functions of the API was used in the SQL query without validation, which allowed a remote API user with permission for an update or delete function to modify or delete records beyond that permission and to read data from other tables. The ID is now required to be a positive integer and the affected queries use parameter placeholders (#7051) - Fixed configuration values containing backslashes (e.g. the SMTP password in System > Main Config > Mail) losing one backslash each time an unrelated configuration tab was saved. The sections that are not being edited were unescaped when read and written back without re-escaping. Values set through the remote API system_config_set and server_config_set functions are now escaped in the same way as values saved through the interface (#7042) - Fixed PHP warnings "Trying to access array offset on value of type bool" and invalid width/height CSS on the login and main pages when the custom panel logo is an SVG image or can not be parsed. The logo now falls back to the stylesheet dimensions (#7039) - Fixed the "more" button of the donation dashlet reacting to every button on the dashboard, including the logout button and the close buttons of info messages. The dashlet now uses a plain HTML disclosure element without JavaScript (#7043) - Fixed an internal cron job never being executed again when a cron run was aborted while the job was running. The job is now released as soon as the cron run that started it is gone, instead of staying marked as running for up to a day. Cron jobs can declare a maximum expected run time, which is used when the process that started the job is not known (#7034) - Fixed the SSH key pair generation for a client failing with "Data too long for column ssh_rsa" when the domain or user name used in the key comment is long, as the public key of a 3072 bit RSA key with a long comment exceeds 600 characters. The column is now a text column. The database_password_sha2 column of database users, which was exactly as long as the generated hash, has been widened to 255 characters as pre-hashed values passed through the remote API can be longer (#7074) - Fixed the owner of an existing .htaccess file being changed to root:root when a folder protection is deleted or set to inactive. The file now keeps the system user and group of the website (#7035) - Fixed the rspamd settings file of a mailbox or forwarding not being regenerated when its greylisting setting is changed, so that disabling greylisting had no effect until the next resync (#7027) - Fixed traffic quota not being enforced when the quota is set to 0, which could be used to bypass the client traffic limit and the automatic deactivation of overtraffic websites (#7024) - Fixed uncaught DivisionByZeroError when opening the website traffic statistics on PHP 8.x (#7023) - Fixed undefined $php_fpm_reload_mode in the nginx plugin, which aborted the PHP-FPM reload when a website was deleted (#7022) - Fixed broken installation of the pureftpd_sni_plugin.inc.php plugin (#7020) - Fixed false warning "PHP cli binary is not available in the jail" when PHP is provided by the global jailkit configuration (#7018) - Fixed grant_master_database_rights silently failing on a master server (#7016). The fix in the development version aborted the update of a single server with "Unable to get the user rights" when the master database permissions were reconfigured, because a single server has no slave server users. An empty user list is now handled as the normal case and only a database error aborts the update - Fixed PHP fatal error after a deb.sury.org PHP upgrade when the IDS temp folder became read-only (#7010) - Fixed email routing error when adding routing for an email domain in multiserver setups (#7009) - Removed the stale interface/lib/config.inc.php file from the repository (#7007) - Fixed TypeError when sending a second mail from a cronjob (#7003) - Fixed admin not receiving notifications for failed nightly backups (#7002) - Fixed PHP fatal error (TypeError) in nginx_plugin.inc.php and apache2_plugin.inc.php (#7000) - Fixed shell_user_update being triggered before the web_domain record was replicated, which resulted in an outdated configuration on secondary servers (#6997) - Fixed invalid Sieve syntax when using Subject as source together with the domain or localpart operator (#7011) - Migrated rspamd user settings to follow the rspamd configuration best practices (#7006) - Fixed the sender address of the reseller welcome mail, which was empty because the mail section of the global config was not read (#7028) - Fixed a malformed From header in notification mails that use a sender name in the mail template (#7028) ### Other Improvements - Added a commandline option to ispconfig_update.sh to update to a specific branch beside develop - Improved acme.sh handling for local loopback addresses, improved acme.sh logging in the installer and added a curl fallback to download acme.sh - Added the systemd override for the ISPConfig temp dir to the Apache systemd unit as well - Avoid errors when the ISPConfig log directory does not exist yet - Improved getmail input field validation - Mailbox soft-delete values are automatically converted from y/n to the numeric values used by the new configuration Please see changelog for a full list of features and bugfixes: https://git.ispconfig.org/ispconfig/ispconfig3/-/milestones/99 --- ## ISPConfig 3.3.1p1 Released This is a patch release that fixes several bugs discovered after the 3.3.1 release, including Debian 13 PHP socket issues, Rspamd spam header handling, MySQL 8.0.45 compatibility, and various other improvements. ## What's new in ISPConfig 3.3.1p1? ### Bugfixes - Fixed Debian 13 PHP socket issue in apps vhost and PHP-FPM pools (#6983) - Fixed Rspamd X-Spam-Status header not being added when using "Rewrite Subject" spam tag method, which caused spam to be forwarded via CC/redirect rules (#6979) - Fixed Apache error.log rotation causing logs to not being written after rotation (#6992) - Fixed phpMyAdmin link not showing in database list (#6981) - Fixed SimplePie PHP 8 compatibility for RSS feeds (#6982) - Fixed client creation via API failing with usertheme_syntax_incorrect error (#6990) - Fixed mail user login field not being updated when renaming mailbox (#6989) - Fixed Dovecot last_access log parsing pattern for Debian 13/Dovecot 2.4 (#6994) - Fixed vmail user permissions to dovecot-sql.conf for Debian 13 (#6976) - Fixed stale content.php file causing errors (#6974) - Fixed system_update warning remaining after disabling the Check for Linux updates feature (#6896) - Fixed harddisk storage monitoring trigger values (#6978) - Cleaned up bouncing space in postfix config (#6985) - Added missing disablereplicator column to mail_user table (#6993) ### New Features - Added support for MySQL 8.0.45 (#6991) - Added support for extended RBL syntax for Spamhaus RBL (#6977) - Added support for per-domain mail relaying without username/password (#6877) - Added support for RHEL 10 postfix without hash map type (#6980) Please see changelog for a full list of features and bugfixes: https://git.ispconfig.org/ispconfig/ispconfig3/-/milestones/100 --- ## ISPConfig 3.3.1 Released This version brings Debian 13 support with Dovecot 2.4 compatibility, RHEL 10 based distribution support (AlmaLinux 10, RockyLinux 10), PHP 8.5 compatibility, pgAdmin for PostgreSQL databases, improved DNS validation, and many bugfixes. It also fixes 3 security issues. ## What's new in ISPConfig 3.3.1? ### Debian 13 Support ISPConfig 3.3.1 adds full support for Debian 13 (Trixie), including compatibility with Dovecot 2.4 which introduces an incompatible configuration language. The Dovecot configuration templates have been updated to work with the new 2.4 syntax. ### RHEL 10 Based Distribution Support Support has been added for RHEL 10 based distributions including AlmaLinux 10 and RockyLinux 10. ### PHP 8.5 Compatibility ISPConfig is now compatible with PHP 8.5. This includes fixes for deprecated functions like `mysqli_ping()` and non-canonical casts. ### pgAdmin for PostgreSQL Databases A pgAdmin link has been added for PostgreSQL databases, similar to how phpMyAdmin works for MySQL/MariaDB databases. The phpMyAdmin link is now correctly hidden for PostgreSQL databases. ### DNS Record Validation Improvements Improved validation for DNS records including better CNAME conflict detection, SRV record field validation, and DMARC record handling. ### Rspamd Greylisting Fixes Fixed issues where rspamd greylisting settings from spamfilter policies were not being applied correctly to domain-level spam filter entries and user configurations. ### Let's Encrypt Improvements - Removed OCSP stapling sections from vhosts as Let's Encrypt no longer supports OCSP - Fixed default CA setting when acme.sh is installed from the Let's Encrypt class ### Extended CLI Resync Functionality The Tools > Resync function has been extended in the ispc CLI command, allowing more flexible server synchronization from the command line. ### Improved Autoinstall Updates Improved updating with autoinstall.conf.php including better documentation and the ability to pass --autoinstall option from ispconfig_update.sh and ispc update to update.php. ### Improved website logfile permissions Website logfiles are now created with stricter permissions (640) and ownership (root:clientX). ### Security Fixes This release addresses three security vulnerabilities that could allow privilege escalation under certain conditions. The issues affect theme handling, backup restoration, and backup download functionality. We strongly recommend all users to update to this version as soon as possible. We would like to thank **SSD Secure Disclosure** for responsibly discovering and reporting these vulnerabilities. ### Backup System Changes - Removed zip and rar archive formats from rootgz backup mode as they do not preserve file ownership. These formats will automatically fall back to tar_gzip when selected with rootgz mode. The zip and rar mode will stay available for userzip mode. ### Bugfixes & Minor Features - Fixed DKIM config bug in amavis that could cause DKIM entries to be lost - Fixed PowerDNS records not being created when domain is inactive - Fixed PHP 8.3 compatibility issues - Fixed false positive "Possible attack detected" for valid Nginx directive snippets - Fixed trailing space in nginx vhost server_name property - Fixed data cleanup when server is deleted (monitor_data and server_ip) - Fixed sysdatalog processing with incorrect unixtime values - Improved useragent for cronjobs (wget) - Silenced z_php_fpm_incron_reload_plugin warnings when no PHP version is set - Fixed CAA DNS entry name handling with TLD - Improved email filter regex syntax validation - Fixed stats/.htaccess file permissions - Added more plugin events for interface plugins Please see changelog for a full list of features and bugfixes: https://git.ispconfig.org/ispconfig/ispconfig3/-/milestones/95 ## Known issues Please take a look at the bug tracker: https://git.ispconfig.org/ispconfig/ispconfig3/-/issues?scope=all&utf8=%E2%9C%93&state=opened&label_name[]=Bug You can report bugs at https://git.ispconfig.org/ispconfig/ispconfig3/issues ## Supported Linux distributions - Debian 11 – 13 (recommended) and Debian testing - Ubuntu 22.04 LTS – 26.04 LTS (recommended) - AlmaLinux 8 – 10 - RockyLinux 8 – 10 - CentOS 8 ## Download ISPConfig 3.3.2 https://www.ispconfig.org/downloads/ISPConfig-3.3.2.tar.gz The installation instructions for ISPConfig can be found here: https://www.ispconfig.org/ispconfig-3/documentation/ ## How can I update to ISPConfig 3.3.2? Run the following commands as root user on your ISPConfig server: ``` cd /tmp wget https://www.ispconfig.org/downloads/ISPConfig-3.3.2.tar.gz tar xvfz ISPConfig-3.3.2.tar.gz cd ispconfig3_install/install php -q update.php ``` ispconfig3_install/TODO.txt0000775000000000000000000000017215114346020014655 0ustar rootrootPlease see our GitLab issues for feature requests and bug reports. https://git.ispconfig.org/ispconfig/ispconfig3/issues ispconfig3_install/docs/0000775000000000000000000000000015274156743014316 5ustar rootrootispconfig3_install/docs/extensions/0000775000000000000000000000000015267416152016510 5ustar rootrootispconfig3_install/docs/extensions/README.md0000775000000000000000000000255215267416152017776 0ustar rootroot# ISPConfig extension developer documentation Documents for developers who write extensions for ISPConfig. Extensions are packages that are installed from the ISPConfig extension repository into `/usr/local/ispconfig/extensions//` on every server, through the panel (System > Extension Installer) or the command line (`ispc extension ...`). | Document | Content | |----------|---------| | [sql_files.md](sql_files.md) | Database tables of an extension: install and uninstall SQL, node vs. master scope, schema migrations on update, the `dbversion` file | | [master_grants.md](master_grants.md) | Giving the server processes of slave servers access to the extension's own tables in the master database: `install/master_grants.list`, `sys_extension_grant`, when the rights are applied | | [extension_limits.md](extension_limits.md) | Registering client, reseller and client-template limits from an extension without touching the core limit forms | Related code: - `server/lib/classes/extension_installer.inc.php`: download, install, update, uninstall, enable and disable of extensions on a server - `server/lib/classes/extension_installer_base.inc.php`: base class of the `_installer` class every extension ships in `install/installer.php` - `server/cli/modules/extension.inc.php`: the `ispc extension` commands - `interface/web/admin/extension_*.php`: the panel side ispconfig3_install/docs/extensions/master_grants.md0000775000000000000000000001203015267416152021702 0ustar rootroot# Extension master database grants How an extension gives the server processes of slave servers access to its own tables in the master database. Audience: extension developers. Read [sql_files.md](sql_files.md) first: it explains the node / master scope of the SQL files and where the master database lives. --- ## 1. The problem In a multiserver setup every slave server talks to the master database through its own MySQL user `ispcsrv`, created when the slave joins. That user only has the rights the ISPConfig installer grants explicitly, table by table (`grant_master_database_rights()` in `install/lib/installer_base.lib.php`). The rights are rebuilt from scratch on every ISPConfig update and by `install/setrights.php`: `REVOKE ALL`, then the fixed list of grants. Tables an extension creates with `install_master.sql` are therefore not reachable from the slaves' server processes (`$app->dbmaster`) until someone grants access, and a manual grant is lost at the next update. ## 2. The declaration file The extension declares the rights it needs in `install/master_grants.list`, one table per line: ``` # :[,...] myext_findings:SELECT,INSERT,UPDATE,DELETE myext_scan_run:SELECT,UPDATE ``` Rules, enforced by the framework: - The table name must start with the extension name followed by an underscore (`_`). An extension can only declare rights on its own tables, never on core tables or tables of other extensions. - Allowed privileges: `SELECT`, `INSERT`, `UPDATE`, `DELETE`. Nothing else, no column lists. Extensions that need more than that on the master are outside the scope of this mechanism. - Empty lines and lines starting with `#` are ignored. Privileges are case insensitive and deduplicated. - One invalid line makes the whole install or update fail; the extension is left not enabled and the error is reported. The grants apply to **all** `ispcsrv` users, so every slave gets the same rights on the table. Row scoping is the extension's job: tables written by servers carry a `server_id` column and a server only touches its own rows. A compromised slave can still write other servers' rows; this is a known limitation of MySQL grants that the planned REST API between nodes and master will remove. ## 3. What the framework does On the **master server** (the server where the master database is local; on a single server setup as well, where it is a no-op because there are no `ispcsrv` users): 1. On install, after the install SQL, and on update, after the migrations, the extension installer parses `master_grants.list` and stores the declarations in the core table `sys_extension_grant` (`extension`, `table_name`, `privileges`). Previous declarations of the extension are replaced, so removing a line from the file removes the stored declaration on the next update. 2. If the MySQL root credentials in `/usr/local/ispconfig/server/lib/mysql_clientdb.conf` are available (the installer writes that file on every server), the grants are applied right away for every existing `ispcsrv` user. Otherwise the installer logs a hint and the grants are applied by the next step. 3. On uninstall, before the uninstall SQL drops the tables, the stored rights are revoked the same way and the declarations are deleted. On **slave servers** nothing happens; they have no access to the master database beyond their grants. **ISPConfig update, `install/setrights.php` and slave join**: whenever the master database rights of the `ispcsrv` users are rebuilt, the installer reads `sys_extension_grant` and grants the declared rights after the core ones. This covers a new slave joining an existing setup (it grants its own rights during installation, with the master root credentials entered there), and it restores the extension rights after the `REVOKE ALL` of an update. When the grants could not be applied right away (no root credentials on the master, or a MySQL error), run this on the master server from an unpacked ISPConfig tarball to apply them: ``` cd install php setrights.php ``` ## 4. Checking - Stored declarations: `SELECT * FROM sys_extension_grant;` in the master database. - Effective rights of a slave: `SHOW GRANTS FOR 'ispcsrv2'@'slave-host';` - Log lines in `/var/log/ispconfig/ispconfig.log` of the master server: `Registered N master database grant(s) for extension ...`, `Applied master database grants of extension ... for N server user(s)`, or the hint that the root credentials are missing. ## 5. Example ``` myext/ install/ install_master.sql CREATE TABLE IF NOT EXISTS `myext_findings` (...) install_node.sql (tables the server needs locally, if any) master_grants.list myext_findings:SELECT,INSERT,UPDATE,DELETE uninstall_master.sql DROP TABLE IF EXISTS `myext_findings`; ``` Server side code on any server then reads and writes the table through the master connection: ```php $app->dbmaster->query("INSERT INTO myext_findings (server_id, severity, message, created) VALUES (?, ?, ?, NOW())", $conf['server_id'], 'high', $message); ``` ispconfig3_install/docs/extensions/extension_limits.md0000775000000000000000000003571015267416152022440 0ustar rootroot# Extension Limits A reference for adding client / reseller / client-template **limits** from an extension, without modifying any of the limit forms, templates, language files or the dashboard dashlet in the core. Audience: anyone (human or AI) implementing an extension that needs to register one or more limit fields. --- ## 1. What this mechanism does ISPConfig stores per-client limits (e.g. `limit_web_domain`, `limit_mailbox`) as columns on the `client` and `client_template` tables, and renders them on the client, reseller and client-template edit forms. Historically a new limit had to be hardcoded into a dozen core files. The **limit registry** removes that requirement. An extension drops a single definition file into a directory, and the core then: 1. **injects** the limit fields into the `client` / `reseller` / `client_template` form definitions, so the form layer validates them, persists them, and exposes them through the SOAP/remote API; 2. **renders** the fields in a generic accordion panel on the three edit forms; 3. **provides** the label texts used outside the render loop; 4. **adds** usage/quota bars to the client dashboard "limits" dashlet. The extension keeps ownership of two things only: - its **database schema** — the `ALTER TABLE` that adds the limit columns; - its **enforcement** — the `checkClientLimit()` / `checkResellerLimit()` calls in the extension's own edit controllers. No limit-specific naming lives in the core. The mechanism is fully generic and works for any number of extensions at once. --- ## 2. Quick start 1. Add your limit columns to the `client` and `client_template` tables (§6). 2. Drop a definition file at `interface/web/client/lib/limits.d/.php` (§4). 3. Call `checkClientLimit()` / `checkResellerLimit()` in your extension's edit controllers (§7). That is the whole integration. The panel, validation, persistence, template merge, SOAP exposure and dashboard bars follow automatically. --- ## 3. The drop-in directory ``` interface/web/client/lib/limits.d/.php ``` The registry scans `interface/web/client/lib/limits.d/*.php` once per request. The core ships this directory with an `empty.dir` placeholder; your installer simply copies one file into it. A single central directory is used (not one per module) because limits are only ever edited in the client module. One file per extension keeps installs and uninstalls trivial: drop the file to enable, delete it to disable. --- ## 4. Definition file format A definition file **returns an array**. Minimal example: ```php 'example', // unique key, used for dedup 'section' => array( 'id' => 'Example', // -> accordion panel "collapseExample" 'title' => 'Example limits', // panel heading 'order' => 80, // sort position among panels ), 'limits' => array( 'limit_example' => array( 'label' => 'Max. number of examples', 'datatype' => 'INTEGER', 'formtype' => 'TEXT', 'default' => '-1', 'validators' => array( array('type' => 'ISINT', 'errmsg' => 'Max. number of examples must be a number.'), ), 'applies_to' => array('client', 'reseller', 'client_template'), 'usage' => array( 'db_table' => 'example_item', 'db_where' => '', ), ), ), ); ``` ### 4.1 Top-level keys | Key | Required | Meaning | |---|---|---| | `extension` | yes | Unique string key for this definition. Used to de-duplicate and as a logging handle. | | `min_core` | no | Minimum core version (e.g. `'3.3.2'`). If the installed core is older, the whole definition is skipped. Development builds are always treated as current. | | `section` | no | The accordion panel the fields are grouped into. Defaults to a generic "Extensions" panel. | | `limits` | yes | Map of `column_name => field definition`. | ### 4.2 The `section` block | Key | Meaning | |---|---| | `id` | Identifier used to build the panel's HTML ids (`heading`, `collapse`). Keep it alphanumeric. | | `title` | The heading shown on the panel. | | `order` | Integer sort position. Panels from all extensions are ordered by this value. | Two extensions may share the same `section.id` to render their fields in **one shared panel**; a different `id` produces a **separate panel**. ### 4.3 A limit's field definition | Key | Required | Meaning | |---|---|---| | `label` | yes | The field label (also used as `_txt` for the dashlet and other placeholders). | | `datatype` | no | tform datatype. Defaults to `INTEGER`. | | `formtype` | no | tform formtype. Defaults to `TEXT`. | | `default` | no | Default value for new records. Defaults to `-1` (the "unlimited" convention). | | `validators` | no | Array of tform validators. See §4.4. | | `applies_to` | no | Which forms the limit appears on: any of `client`, `reseller`, `client_template`. Defaults to all three. | | `usage` | no | Dashboard usage reporting. See §4.5. | Additional tform field keys are passed through verbatim, so any field type is supported (not only `INTEGER`/`TEXT`): `value`, `separator`, `width`, `maxlength`, `regex`, `filters`. ### 4.4 Validators and error messages Validators use the standard tform validator format. The important convention is the **`errmsg`**: put the **full human-readable message text** there, not a language-file key. ```php 'validators' => array( array('type' => 'ISINT', 'errmsg' => 'Max. number of examples must be a number.'), ), ``` The form layer renders the `errmsg` verbatim when it is not found as a wordbook key, so the message displays correctly without the extension shipping language files. (The label text in `label` is likewise inline.) ### 4.5 The `usage` block (dashboard reporting) If a limit declares a `usage` block, the client dashboard "limits" dashlet shows a usage/quota bar for it. The dashlet counts rows generically, exactly like the built-in limits. | Key | Meaning | |---|---| | `db_table` | The table whose rows represent the consumed items. | | `db_where` | Optional extra SQL `WHERE` fragment (without the leading `AND`). | | `q_type` | Optional. Set to a column name for a **sum/quota** style limit (the dashlet sums that column instead of counting rows). | Omit the whole `usage` block to keep a limit out of the dashlet. --- ## 5. The naming rule (hard requirement) **Every limit column name must contain the substring `limit`.** Examples: `limit_example`, `limit_example_size`, `example_limit`. The client-template engine recognises a column as a limit purely by this substring when it merges templates onto clients. A limit column without `limit` in its name will be stored, but it will **not** be carried by client templates. --- ## 6. Database schema (owned by the extension) The extension's installer adds the limit columns. Resellers are stored in the `client` table, so reseller limits need columns on `client` (no separate reseller table). Limits that apply to client templates also need the column on `client_template`. ```sql ALTER TABLE `client` ADD COLUMN IF NOT EXISTS `limit_example` int(11) NOT NULL DEFAULT '-1'; ALTER TABLE `client_template` ADD COLUMN IF NOT EXISTS `limit_example` int(11) NOT NULL DEFAULT '-1'; ``` Rules of thumb: - A limit with `applies_to` containing `client` or `reseller` → column on `client`. - A limit with `applies_to` containing `client_template` → column on `client_template`. - The `-1` default is the "unlimited" convention used throughout ISPConfig. ### Install ordering and the missing-column guard Install the columns **and** the definition file together. As a safety net, the registry verifies that a limit's backing column actually exists before using it: a limit whose column is missing is silently skipped (no panel, no SOAP field, no broken SQL). This keeps a half-finished install from breaking the client edit form. It is a safety net, not a substitute for installing both parts. To **uninstall**, remove the definition file. You may keep or drop the columns; while the file is gone the columns are simply ignored by the forms. --- ## 7. Enforcement (owned by the extension) The registry makes the limits visible, editable and stored. **Enforcing** them at create time is the extension's job, done in the extension's own edit controllers with the generic core helpers: ```php // In your extension's *_edit.php controller, before allowing a new item: if(!$app->tform->checkClientLimit('limit_example')) { $app->error($app->tform->wordbook['limit_example_txt'] . ': ' . $app->tform->lng('limit_reached_txt')); } if(!$app->tform->checkResellerLimit('limit_example')) { $app->error($app->tform->wordbook['limit_example_txt'] . ': ' . $app->tform->lng('limit_reached_txt')); } ``` `checkClientLimit($name)` compares the count of existing rows in the form's table against the logged-in client's value of column `$name`. `checkResellerLimit()` does the same against the client's reseller. Both are generic and need no registry awareness. --- ## 8. How it fits together (for reference) You do not need to touch any of the following — it is listed so the data flow is clear. | Concern | Where it happens | |---|---| | Field injection into forms | `limits_registry::apply_to_form()` is called at the end of `client.tform.php`, `reseller.tform.php`, `client_template.tform.php`. This drives tform validation, persistence, and SOAP exposure. | | Rendering | A generic `` accordion block in the three `*_edit_limits.htm` templates, populated by the controllers via `limits_registry::get_template_sections()`. | | Labels outside the loop | `limits_registry::get_labels()` (merged into the form wordbook and the dashlet). | | Dashboard bars | `limits_registry::get_dashlet_limits()` merged into the dashlet's limit list. | | Client-template merge | The core template engine treats any `limit*` column generically; no per-field code. | | SOAP / remote API | The remote API loads the same form definitions, so injected fields round-trip automatically. | The registry class is `interface/lib/classes/limits_registry.inc.php`, loaded with `$app->load('limits_registry')`. --- ## 9. Worked example An extension `example` that ships scheduled jobs with two limits — a count and a total size — grouped in one panel, both shown on the dashboard. `interface/web/client/lib/limits.d/example.php`: ```php 'example', 'min_core' => '3.3.2', 'section' => array('id' => 'Example', 'title' => 'Example jobs', 'order' => 80), 'limits' => array( 'limit_example_job' => array( 'label' => 'Max. number of jobs', 'datatype' => 'INTEGER', 'formtype' => 'TEXT', 'default' => '-1', 'validators' => array( array('type' => 'ISINT', 'errmsg' => 'Max. number of jobs must be a number.'), ), 'applies_to' => array('client', 'reseller', 'client_template'), 'usage' => array('db_table' => 'example_job', 'db_where' => ''), ), 'limit_example_size' => array( 'label' => 'Max. total job size (MB)', 'datatype' => 'INTEGER', 'formtype' => 'TEXT', 'default' => '-1', 'validators' => array( array('type' => 'ISINT', 'errmsg' => 'Max. total job size must be a number.'), ), 'applies_to' => array('client', 'reseller', 'client_template'), 'usage' => array('db_table' => 'example_job', 'db_where' => '', 'q_type' => 'size_mb'), ), ), ); ``` Installer SQL: ```sql -- The extension's own data table (referenced by the 'usage' block for dashboard reporting) CREATE TABLE IF NOT EXISTS `example_job` ( `id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT 'riud', `sys_perm_group` varchar(5) NOT NULL DEFAULT 'ru', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `size_mb` int(11) NOT NULL DEFAULT '0', PRIMARY KEY (`id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8; -- Limit columns on the client / client_template tables ALTER TABLE `client` ADD COLUMN IF NOT EXISTS `limit_example_job` int(11) NOT NULL DEFAULT '-1'; ALTER TABLE `client` ADD COLUMN IF NOT EXISTS `limit_example_size` int(11) NOT NULL DEFAULT '-1'; ALTER TABLE `client_template` ADD COLUMN IF NOT EXISTS `limit_example_job` int(11) NOT NULL DEFAULT '-1'; ALTER TABLE `client_template` ADD COLUMN IF NOT EXISTS `limit_example_size` int(11) NOT NULL DEFAULT '-1'; ``` Enforcement in `example_job_edit.php`: ```php if(!$app->tform->checkClientLimit('limit_example_job')) { /* refuse */ } if(!$app->tform->checkResellerLimit('limit_example_job')) { /* refuse */ } ``` --- ## 10. Extension author checklist - [ ] Every limit column name contains the substring `limit` (§5). - [ ] Columns added to `client` (for `client`/`reseller`) and/or `client_template` (for `client_template`) with a sensible default, usually `-1` (§6). - [ ] Definition file at `interface/web/client/lib/limits.d/.php` returns an array with `extension` and `limits` (§4). - [ ] Each limit has a `label`; numeric limits have an `ISINT` validator whose `errmsg` is the full message text (§4.4). - [ ] `applies_to` lists exactly the forms you intend (§4.3). - [ ] Optional `usage` block added for any limit that should appear on the dashboard (§4.5). - [ ] Definition file and columns are installed together, and both are removed on uninstall (§6). - [ ] `checkClientLimit()` / `checkResellerLimit()` called in the extension's own edit controllers (§7). --- ## 11. Manual test plan 1. **Not installed** — client / reseller / client-template edit pages render exactly as before; no extra panel; no notices; dashlet unchanged. 2. **Installed** — the panel appears on all forms listed in `applies_to`, with one input per limit defaulting to the configured default. 3. **Persistence** — set values, save, reload → values persist. 4. **Validation** — enter a non-integer into an `ISINT` limit → the message from `errmsg` is shown and the save is rejected. 5. **Client template** — create a template with the limits, assign it as master to a client → the limits are written onto the client; additional templates add up as expected. 6. **Enforcement** — a client/reseller hits the limit → creating the next item is refused by `checkClientLimit()` / `checkResellerLimit()`. 7. **Dashboard** — limits with a `usage` block show usage/percentage bars. 8. **Remote API** — `client_add` / `client_update` accept and round-trip the limit fields. 9. **Multiple extensions** — a second definition sharing a `section.id` renders in the same panel; a different `id` renders a separate panel, ordered by `section.order`. ispconfig3_install/docs/extensions/sql_files.md0000775000000000000000000002360615267416152021025 0ustar rootroot# Extension SQL files: install, uninstall and schema migrations How an ISPConfig extension creates, updates and removes its database tables. Audience: extension developers. Everything described here is handled by the server side extension installer (`server/lib/classes/extension_installer.inc.php`). The extension only ships the SQL files in the right place; the framework runs them. --- ## 1. Where the SQL runs An extension is installed **locally on every server** of an ISPConfig setup (single server, master and every slave). Each server has its own local ISPConfig database (`dbispconfig`), and the master server additionally holds the master database that the panel works on. On a single server or on the master server, the local database and the master database are the same database. Slave servers never connect to the master database during install, update or uninstall. They only hold the credentials of their local database. Therefore the SQL of an extension is split into two scopes: | Scope | Runs on | Typical content | |----------|------------------------------------------------------|------------------------------------------------------------| | `node` | every server, against the local database | tables the server processes need locally | | `master` | only the server that holds the master database | tables the panel (interface) reads and writes | A table that a server writes and the panel reads (for example scan results) is a `master` table: the server process writes it through `$app->dbmaster`. The rights the slave servers need for that are declared in `install/master_grants.list`, see [master_grants.md](master_grants.md). All SQL files run through the `mysql` command line client against the local ISPConfig database (`$conf['db_database']`) with the MySQL root credentials from `/usr/local/ispconfig/server/lib/mysql_clientdb.conf`, like the SQL files of the ISPConfig updater, so `CREATE TABLE`, `ALTER TABLE` and `DROP TABLE` work. The ISPConfig database user itself has only SELECT, INSERT, UPDATE and DELETE on that database; it is used as a fallback (with a warning in the log) when the root credentials are not available. Do not put `USE` or `CREATE DATABASE` statements into the files. ## 2. File layout All SQL files live in the `install/` directory of the extension: ``` / install/ installer.php required, _installer class file.list files to copy / symlink into /usr/local/ispconfig install_node.sql full schema, node scope (optional) install_master.sql full schema, master scope (optional) uninstall_node.sql drops the node scope tables (optional) uninstall_master.sql drops the master scope tables (optional) master_grants.list rights of the slave servers on the master tables (optional) incremental/ upd_0001_node.sql migration step 1, node scope upd_0001_master.sql migration step 1, master scope upd_0002_master.sql migration step 2, master scope only ... ``` Legacy names: `install/install.sql` and `install/uninstall.sql` are still accepted and mean the same as `install_node.sql` / `uninstall_node.sql`. If both the new and the legacy name exist, the new name wins and the legacy file is ignored. New extensions should use the `_node` / `_master` names. Every file is optional. An extension without database tables ships none of them. ## 3. Install `install_extension()` runs, in this order: 1. `installer->install()` of the extension's installer class 2. `install_node.sql` (or legacy `install.sql`) on every server 3. `install_master.sql`, only where the master database is local 4. the schema version file `dbversion` is written (see section 5) 5. the master database grants of `master_grants.list` are registered and applied, only where the master database is local (see [master_grants.md](master_grants.md)) 6. `installer->enable()` If one of the SQL files fails, the install stops with an error. The extension is left downloaded but **not enabled**, and the error is reported to the caller (panel or `ispc extension install`). Fix the SQL, then run the install again. The install SQL always contains the **full current schema**. When you add a migration step (section 5), also update `install_node.sql` / `install_master.sql` so that a fresh install ends up with the same schema as an updated install. ## 4. Uninstall `uninstall_extension()` runs, in this order: 1. `installer->disable()` 2. `installer->uninstall()` 3. the master database grants are revoked, only where the master database is local 4. `uninstall_node.sql` (or legacy `uninstall.sql`) on every server 5. `uninstall_master.sql`, only where the master database is local 6. the extension directory is removed A failing uninstall SQL is logged and reported, but the uninstall continues and the extension directory is removed anyway. Write uninstall files so they cannot fail on a half installed extension: `DROP TABLE IF EXISTS`. ## 5. Schema migrations on update `update_extension()` runs no install SQL. Instead it applies the pending migration steps from `install/incremental/` after `installer->update()` and before `installer->enable()`. After the migrations the master database grants are registered again, so `master_grants.list` may change with an update. Steps are numbered consecutively, starting at 1, four digits zero padded, with the scope as suffix: ``` install/incremental/upd_0001_node.sql install/incremental/upd_0001_master.sql install/incremental/upd_0002_node.sql ``` A step may ship a node file, a master file, or both. The step number is one counter for the whole extension, regardless of scope. Numbers must not have gaps: the framework applies the steps from the current version plus one up to the highest number found, and treats a missing file of a scope as "nothing to do for this scope in this step". The applied schema version is stored in the file `dbversion` in the extension directory (`/usr/local/ispconfig/extensions//dbversion`), as a plain integer: - The framework owns this file. Do not ship a file with this name in the package. - After a fresh install it contains the highest step number shipped in `install/incremental/`, because the install SQL already contains the full schema. Without any migration files it contains `0`. - On update, all steps above the stored number are applied, then the number is raised. The number is raised after every complete step, so a failing step keeps the version of the last complete step. The update stops, the extension is **not enabled**, and the error is reported. After fixing the SQL, running the update again continues with the failed step. - A missing file counts as version `0`. This is the case for extensions that were installed before schema migrations existed. All steps are then applied on the next update, so migration files must be written **re-runnable**, see section 6. - Removing the file by hand forces all steps to run again on the next update. Useful for support cases, harmless when the migrations are re-runnable. The current schema version of every extension is also reported per server in the extension list that `scan_extensions()` stores in `monitor_data` (`dbversion` field). ## 6. Writing the SQL - Make migrations re-runnable. MariaDB and MySQL 8 support `CREATE TABLE IF NOT EXISTS`, `DROP TABLE IF EXISTS`, and MariaDB also supports `ALTER TABLE ... ADD COLUMN IF NOT EXISTS` / `DROP COLUMN IF EXISTS` / `ADD INDEX IF NOT EXISTS`. - One statement per line or terminated by `;` as usual, the file is piped into the `mysql` client. Comments with `--` and `/* */` are fine. - Tables that servers write and the panel reads carry a `server_id` column, so the panel can filter per server and a server only touches its own rows. - Prefix table names with the extension name (`_...`) to avoid clashes with core tables and other extensions. - Use `utf8mb4` and the `InnoDB` engine like the core tables. - Keep master scope tables out of node files and vice versa. On a single server both scopes run against the same database, so a mistake is not visible there; it shows up on a multiserver setup as a missing table on the slaves or on the master. Example `install_master.sql`: ```sql CREATE TABLE IF NOT EXISTS `myext_findings` ( `finding_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT 0, `sys_groupid` int(11) unsigned NOT NULL DEFAULT 0, `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) unsigned NOT NULL DEFAULT 0, `severity` enum('info','low','medium','high') NOT NULL DEFAULT 'info', `message` text, `created` datetime DEFAULT NULL, PRIMARY KEY (`finding_id`), KEY `server_id` (`server_id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; ``` Example `incremental/upd_0001_master.sql` adding a column later on: ```sql ALTER TABLE `myext_findings` ADD COLUMN IF NOT EXISTS `resolved` tinyint(1) NOT NULL DEFAULT 0; ``` Example `uninstall_master.sql`: ```sql DROP TABLE IF EXISTS `myext_findings`; ``` ## 7. Checking what happened - The applied version: `cat /usr/local/ispconfig/extensions//dbversion` - Log lines: the installer logs every SQL file it runs, skips or fails to `/var/log/ispconfig/ispconfig.log` (`Loaded install_node.sql for extension ...`, `Skipping install_master.sql of extension ..., the master database is not on this server`, `Failed to run upd_0002_node.sql for extension ...`). Set the server log level to debug to see the skip and "no pending migrations" messages. - Command line: `ispc extension install `, `ispc extension update ` and `ispc extension uninstall ` print the errors of the extension installer directly. ispconfig3_install/docs/old_server_plugins/0000775000000000000000000000000015114346020020201 5ustar rootrootispconfig3_install/docs/old_server_plugins/bind_dlz_plugin.inc.php0000775000000000000000000002570115114346020024635 0ustar rootrootplugins->registerEvent('dns_soa_insert', $this->plugin_name, 'soa_insert'); $app->plugins->registerEvent('dns_soa_update', $this->plugin_name, 'soa_update'); $app->plugins->registerEvent('dns_soa_delete', $this->plugin_name, 'soa_delete'); //* RR $app->plugins->registerEvent('dns_rr_insert', $this->plugin_name, 'rr_insert'); $app->plugins->registerEvent('dns_rr_update', $this->plugin_name, 'rr_update'); $app->plugins->registerEvent('dns_rr_delete', $this->plugin_name, 'rr_delete'); } function soa_insert($event_name, $data) { global $app, $conf; if($data["new"]["active"] != 'Y') return; $origin = substr($data["new"]["origin"], 0, -1); $ispconfig_id = $data["new"]["id"]; $serial = $app->db->queryOneRecord("SELECT * FROM dns_soa WHERE id = ?", $ispconfig_id); $ttl = $data["new"]["ttl"]; //$_db = clone $app->db; //$_db->dbName = 'named'; $app->db->query("INSERT INTO named.records (zone, ttl, type, primary_ns, resp_contact, serial, refresh, retry, expire, minimum, ispconfig_id) VALUES ". "(?, ?, 'SOA', ?, ?, ?, ?, ?, ?, ?, ?)", $origin, $ttl, $data["new"]["ns"], $data["new"]["mbox"], $serial["serial"], $serial["refresh"], $serial["retry"], $serial["expire"], $serial["minimum"], $ispconfig_id); //unset($_db); } function soa_update($event_name, $data) { global $app, $conf; if($data["new"]["active"] != 'Y') { if($data["old"]["active"] != 'Y') return; $this->soa_delete($event_name, $data); } else { if($data["old"]["active"] == 'Y') { $origin = substr($data["new"]["origin"], 0, -1); $ispconfig_id = $data["new"]["id"]; $serial = $app->db->queryOneRecord("SELECT * FROM dns_soa WHERE id = ?", $ispconfig_id); $ttl = $data["new"]["ttl"]; //$_db = clone $app->db; //$_db->dbName = 'named'; $app->db->query("UPDATE named.records SET zone = ?, ttl = ?, primary_ns = ?, resp_contact = ?, serial = ?, refresh = ?, retry = ?, expire = ?, minimum = ? WHERE ispconfig_id = ? AND type = 'SOA'", $origin, $ttl, $data["new"]["ns"], $data["new"]["mbox"], $serial["serial"], $serial["refresh"], $serial["retry"], $serial["expire"], $serial["minimum"], $data["new"]["id"]); //unset($_db); } else { $this->soa_insert($event_name, $data); $ispconfig_id = $data["new"]["id"]; if ($records = $app->db->queryAllRecords("SELECT * FROM dns_rr WHERE zone = ? AND active = 'Y'", $ispconfig_id)) { foreach($records as $record) { foreach ($record as $key => $val) { $data["new"][$key] = $val; } $this->rr_insert("dns_rr_insert", $data); } } } } } function soa_delete($event_name, $data) { global $app, $conf; //$_db = clone $app->db; //$_db->dbName = 'named'; $app->db->query( "DELETE FROM named.dns_records WHERE zone = ?", substr($data['old']['origin'], 0, -1)); //unset($_db); } function rr_insert($event_name, $data) { global $app, $conf; if($data["new"]["active"] != 'Y') return; $zone = $app->db->queryOneRecord("SELECT * FROM dns_soa WHERE id = ?", $data["new"]["zone"]); $origin = substr($zone["origin"], 0, -1); $ispconfig_id = $data["new"]["id"]; $type = $data["new"]["type"]; if (substr($data["new"]["name"], -1) == '.') { $name = substr($data["new"]["name"], 0, -1); } else { $name = ($data["new"]["name"] == "") ? $name = '@' : $data["new"]["name"]; } if ($name == $origin || $name == '') { $name = '@'; } switch ($type) { case "CNAME": case "MX": case "NS": case "ALIAS": case "PTR": case "SRV": if(substr($data["new"]["data"], -1) != '.'){ $content = $data["new"]["data"] . '.'; } else { $content = $data["new"]["data"]; } break; case "HINFO": $content = $data["new"]["data"]; $quote1 = strpos($content, '"'); if($quote1 !== FALSE) { $quote2 = strpos(substr($content, ($quote1 + 1)), '"'); } if ($quote1 !== FALSE && $quote2 !== FALSE) { $text_between_quotes = str_replace(' ', '_', substr($content, ($quote1 + 1), (($quote2 - $quote1)))); $content = $text_between_quotes.substr($content, ($quote2 + 2)); } break; default: $content = $data["new"]["data"]; } $ttl = $data["new"]["ttl"]; //$_db = clone $app->db; //$_db->dbName = 'named'; if ($type == 'MX') { $app->db->query("INSERT INTO named.records (zone, ttl, type, host, mx_priority, data, ispconfig_id)". " VALUES (?, ?, ?, ?, ?, ?, ?)", $origin, $ttl, $type, $name, $data["new"]["aux"], $content, $ispconfig_id); } elseif ($type == 'SRV') { $app->db->query("INSERT INTO named.records (zone, ttl, type, data, ispconfig_id)". " VALUES (?, ?, ?, ?, ?)", $origin, $ttl, $type, $data["new"]["aux"] . ' ' . $content, $ispconfig_id); } else { $app->db->query("INSERT INTO named.records (zone, ttl, type, host, data, ispconfig_id)". " VALUES (?, ?, ?, ?, ?, ?)", $origin, $ttl, $type, $name, $content, $ispconfig_id); } //unset($_db); } function rr_update($event_name, $data) { global $app, $conf; if ($data["new"]["active"] != 'Y') { if($data["old"]["active"] != 'Y') return; $this->rr_delete($event_name, $data); } else { if ($data["old"]["active"] == 'Y') { $zone = $app->db->queryOneRecord("SELECT * FROM dns_soa WHERE id = ?", $data["new"]["zone"]); $origin = substr($zone["origin"], 0, -1); $ispconfig_id = $data["new"]["id"]; $type = $data["new"]["type"]; if (substr($data["new"]["name"], -1) == '.') { $name = substr($data["new"]["name"], 0, -1); } else { $name = ($data["new"]["name"] == "") ? $name = '@' : $data["new"]["name"]; } if ($name == $origin || $name == '') { $name = '@'; } switch ($type) { case "CNAME": case "MX": case "NS": case "ALIAS": case "PTR": case "SRV": if(substr($data["new"]["data"], -1) != '.'){ $content = $data["new"]["data"] . '.'; } else { $content = $data["new"]["data"]; } break; case "HINFO": $content = $data["new"]["data"]; $quote1 = strpos($content, '"'); if($quote1 !== FALSE){ $quote2 = strpos(substr($content, ($quote1 + 1)), '"'); } if($quote1 !== FALSE && $quote2 !== FALSE){ $text_between_quotes = str_replace(' ', '_', substr($content, ($quote1 + 1), (($quote2 - $quote1)))); $content = $text_between_quotes.substr($content, ($quote2 + 2)); } break; default: $content = $data["new"]["data"]; } $ttl = $data["new"]["ttl"]; $prio = (int)$data["new"]["aux"]; //$_db = clone $app->db; //$_db->dbName = 'named'; if ($type == 'MX') { $app->db->query("UPDATE named.records SET zone = ?, ttl = ?, type = ?, host = ?, mx_priority = ?, data = ? WHERE ispconfig_id = ? AND type != 'SOA'", $origin, $ttl, $type, $name, $prio, $content, $ispconfig_id); } elseif ($type == 'SRV') { $app->db->query("UPDATE named.records SET zone = ?, ttl = ?, type = ?, data = ? WHERE ispconfig_id = ? AND type != 'SOA'", $origin, $ttl, $type, $prio . ' ' . $content, $ispconfig_id); } else { $app->db->query("UPDATE named.records SET zone = ?, ttl = ?, type = ?, host = ?, data = ? WHERE ispconfig_id = ? AND type != 'SOA'", $origin, $ttl, $type, $name, $content, $ispconfig_id); } //unset($_db); } else { $this->rr_insert($event_name, $data); } } } function rr_delete($event_name, $data) { global $app, $conf; //$_db = clone $app->db; //$_db->dbName = 'named'; $app->db->query( "DELETE FROM named.dns_records WHERE type != 'SOA' AND zone = ?", substr($data['old']['origin'], 0, -1)); //unset($_db); } } // end class ?> ispconfig3_install/docs/old_server_plugins/nginx_reverseproxy_plugin.inc.php0000775000000000000000000002725415114346020027035 0ustar rootrootplugins->registerEvent('web_domain_insert', $this->plugin_name, 'ssl'); $app->plugins->registerEvent('web_domain_update', $this->plugin_name, 'ssl'); $app->plugins->registerEvent('web_domain_delete', $this->plugin_name, 'ssl'); $app->plugins->registerEvent('web_domain_insert', $this->plugin_name, 'insert'); $app->plugins->registerEvent('web_domain_update', $this->plugin_name, 'update'); $app->plugins->registerEvent('web_domain_delete', $this->plugin_name, 'delete'); // $app->plugins->registerEvent('proxy_reverse_insert',$this->plugin_name,'rewrite_insert'); // $app->plugins->registerEvent('proxy_reverse_update',$this->plugin_name,'rewrite_update'); // $app->plugins->registerEvent('proxy_reverse_delete',$this->plugin_name,'rewrite_delete'); } function insert($event_name, $data) { global $app, $conf; // just run the update function $this->update($event_name, $data); } function update($event_name, $data) { global $app, $conf; if($this->action != 'insert') $this->action = 'update'; if($data['new']['type'] != 'vhost' && $data['new']['type'] != 'vhostsubdomain' && $data['new']['type'] != 'vhostalias' && $data['new']['parent_domain_id'] > 0) { $old_parent_domain_id = intval($data['old']['parent_domain_id']); $new_parent_domain_id = intval($data['new']['parent_domain_id']); // If the parent_domain_id has been chenged, we will have to update the old site as well. if($this->action == 'update' && $data['new']['parent_domain_id'] != $data['old']['parent_domain_id']) { $tmp = $app->dbmaster->queryOneRecord("SELECT * FROM web_domain WHERE domain_id = ? AND active = 'y'", $old_parent_domain_id); $data['new'] = $tmp; $data['old'] = $tmp; $this->action = 'update'; $this->update($event_name, $data); } // This is not a vhost, so we need to update the parent record instead. $tmp = $app->dbmaster->queryOneRecord("SELECT * FROM web_domain WHERE domain_id = ? AND active = 'y'", $new_parent_domain_id); $data['new'] = $tmp; $data['old'] = $tmp; $this->action = 'update'; } // load the server configuration options $app->uses('getconf'); $nginx_config = $app->getconf->get_server_config($conf['server_id'], 'web'); // Create group and user, if not exist $app->uses('system'); //* Create the vhost config file $app->load('tpl'); $tpl = new tpl(); $tpl->newTemplate('nginx_reverseproxy_vhost.conf.master'); $vhost_data = $data['new']; $vhost_data['config_dir'] = $config['nginx']['config_dir']; $vhost_data['ssl_domain'] = $data['new']['ssl_domain']; // Check if a SSL cert exists $ssl_dir = $config['nginx']['config_dir'].'/ssl'; $domain = $data['new']['ssl_domain']; $key_file = $ssl_dir.'/'.$domain.'.key'; $crt_file = $ssl_dir.'/'.$domain.'.crt'; $bundle_file = $ssl_dir.'/'.$domain.'.bundle'; if($vhost_data['nginx_directives']) { $vhost_data['nginx_directives'] = preg_replace("/\[IP\]/", $vhost_data['ip_address'], $vhost_data['nginx_directives']); } if($data['new']['ssl'] == 'y' && @is_file($crt_file) && @is_file($key_file)) { $vhost_data['ssl_enabled'] = 1; $app->log('Enable SSL for: '.$domain, LOGLEVEL_DEBUG); } else { $vhost_data['ssl_enabled'] = 0; $app->log('Disable SSL for: '.$domain, LOGLEVEL_DEBUG); } if(@is_file($bundle_file)) $vhost_data['has_bundle_cert'] = 1; $tpl->setVar($vhost_data); // get alias domains (co-domains and subdomains) $aliases = $app->dbmaster->queryAllRecords("SELECT * FROM web_domain WHERE parent_domain_id = ? AND (type != 'vhostsubdomain' OR type != 'vhostalias') AND active = 'y'", $data['new']['domain_id']); $server_alias = array(); switch($data['new']['subdomain']) { case 'www': $server_alias[] .= 'www.'.$data['new']['domain'].' '; break; case '*': $server_alias[] .= '*.'.$data['new']['domain'].' '; break; } if(is_array($aliases)) { foreach($aliases as $alias) { switch($alias['subdomain']) { case 'www': $server_alias[] .= 'www.'.$alias['domain'].' '.$alias['domain'].' '; break; case '*': $server_alias[] .= '*.'.$alias['domain'].' '.$alias['domain'].' '; break; default: $server_alias[] .= $alias['domain'].' '; break; } $app->log('Add server alias: '.$alias['domain'], LOGLEVEL_DEBUG); } } //* If we have some alias records if(count($server_alias) > 0) { $server_alias_str = ''; $n = 0; // begin a new ServerAlias line after 30 alias domains foreach($server_alias as $tmp_alias) { if($n % 30 == 0) $server_alias_str .= " "; $server_alias_str .= $tmp_alias; } unset($tmp_alias); $tpl->setVar('alias', trim($server_alias_str)); } else { $tpl->setVar('alias', ''); } $vhost_file = $nginx_config['nginx_vhost_conf_dir'].'/'.$data['new']['domain'].'.vhost'; //* Make a backup copy of vhost file copy($vhost_file, $vhost_file.'~'); //* Write vhost file file_put_contents($vhost_file, $tpl->grab()); $app->log('Writing the vhost file: '.$vhost_file, LOGLEVEL_DEBUG); unset($tpl); // Set the symlink to enable the vhost $vhost_symlink = $nginx_config['nginx_vhost_conf_enabled_dir'].'/'.$data['new']['domain'].'.vhost'; if($data['new']['active'] == 'y' && !is_link($vhost_symlink)) { symlink($vhost_file, $vhost_symlink); $app->log('Creating symlink: '.$vhost_symlink.'->'.$vhost_file, LOGLEVEL_DEBUG); } // Remove the symlink, if site is inactive if($data['new']['active'] == 'n' && is_link($vhost_symlink)) { unlink($vhost_symlink); $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file, LOGLEVEL_DEBUG); } if(!is_dir('/var/log/ispconfig/nginx/'.$data['new']['domain'])) $app->system->exec_safe('mkdir -p ?', '/var/log/ispconfig/nginx/'.$data['new']['domain']); // remove old symlink and vhost file, if domain name of the site has changed if($this->action == 'update' && $data['old']['domain'] != '' && $data['new']['domain'] != $data['old']['domain']) { $vhost_symlink = $nginx_config['nginx_vhost_conf_enabled_dir'].'/'.$data['old']['domain'].'.vhost'; unlink($vhost_symlink); $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file, LOGLEVEL_DEBUG); $vhost_file = $nginx_config['nginx_vhost_conf_dir'].'/'.$data['old']['domain'].'.vhost'; unlink($vhost_file); $app->log('Removing file: '.$vhost_file, LOGLEVEL_DEBUG); if(is_dir('/var/log/ispconfig/nginx/'.$data['old']['domain'])) $app->system->exec_safe('rm -rf ?', '/var/log/ispconfig/nginx/'.$data['old']['domain']); } // request a httpd reload when all records have been processed $app->services->restartServiceDelayed('nginx', 'restart'); // Remove the backup copy of the config file. if(@is_file($vhost_file.'~')) unlink($vhost_file.'~'); //* Unset action to clean it for next processed vhost. $this->action = ''; } // Handle the creation of SSL certificates function ssl($event_name, $data) { global $app, $conf; if(!is_dir($conf['nginx']['config_dir'].'/ssl')) $app->system->exec_safe('mkdir -p ?', $conf['nginx']['config_dir'].'/ssl'); $ssl_dir = $conf['nginx']['config_dir'].'/ssl'; $domain = $data['new']['ssl_domain']; $key_file = $ssl_dir.'/'.$domain.'.key.org'; $key_file2 = $ssl_dir.'/'.$domain.'.key'; $csr_file = $ssl_dir.'/'.$domain.'.csr'; $crt_file = $ssl_dir.'/'.$domain.'.crt'; //* Save a SSL certificate to disk if($data["new"]["ssl_action"] == 'save') { $web = $app->masterdb->queryOneRecord("select wd.document_root, sp.ip_address from web_domain wd INNER JOIN server_ip sp USING(server_id) WHERE domain = ?", $data['new']['domain']); $src_ssl_dir = $web["document_root"]."/ssl"; //$domain = $data["new"]["ssl_domain"]; //$csr_file = $ssl_dir.'/'.$domain.".csr"; //$crt_file = $ssl_dir.'/'.$domain.".crt"; //$bundle_file = $ssl_dir.'/'.$domain.".bundle"; $app->system->exec_safe('rsync -v -e ssh root@?:? ?', $web['ip_address'], '~/'.$src_ssl_dir, $ssl_dir); $app->log('Syncing SSL Cert for: '.$domain, LOGLEVEL_DEBUG); } //* Delete a SSL certificate if($data['new']['ssl_action'] == 'del') { //$ssl_dir = $data['new']['document_root'].'/ssl'; $domain = $data['new']['ssl_domain']; $csr_file = $ssl_dir.'/'.$domain.'.csr'; $crt_file = $ssl_dir.'/'.$domain.'.crt'; $bundle_file = $ssl_dir.'/'.$domain.'.bundle'; unlink($csr_file); unlink($crt_file); unlink($bundle_file); $app->log('Deleting SSL Cert for: '.$domain, LOGLEVEL_DEBUG); } } function delete($event_name, $data) { global $app, $conf; // load the server configuration options $app->uses('getconf'); $nginx_config = $app->getconf->get_server_config($conf['server_id'], 'web'); if($data['old']['type'] == 'vhost' || $data['old']['type'] == 'vhostsubdomain' || $data['old']['type'] == 'vhostalias') { //* This is a website // Deleting the vhost file, symlink and the data directory $vhost_symlink = $nginx_config['nginx_vhost_conf_enabled_dir'].'/'.$data['old']['domain'].'.vhost'; unlink($vhost_symlink); $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file, LOGLEVEL_DEBUG); $vhost_file = $nginx_config['nginx_vhost_conf_dir'].'/'.$data['old']['domain'].'.vhost'; unlink($vhost_file); $app->log('Removing vhost file: '.$vhost_file, LOGLEVEL_DEBUG); // Delete the log file directory $vhost_logfile_dir = '/var/log/ispconfig/nginx/'.$data['old']['domain']; if($data['old']['domain'] != '' && !stristr($vhost_logfile_dir, '..')) $app->system->exec_safe('rm -rf ?', $vhost_logfile_dir); $app->log('Removing website logfile directory: '.$vhost_logfile_dir, LOGLEVEL_DEBUG); } } function rewrite_insert($event_name, $data) { global $app, $conf; // just run the update function $this->update($event_name, $data); } function rewrite_update($event_name, $data) { global $app, $conf; $rules = $this->_getRewriteRules($app); $app->uses('getconf'); $nginx_config = $app->getconf->get_server_config($conf['server_id'], 'web'); $app->load('tpl'); $tpl = new tpl(); $tpl->newTemplate("nginx_reverseproxy_rewrites.conf.master"); if (!empty($rules))$tpl->setLoop('nginx_rewrite_rules', $rules); $rewrites_file = $nginx_config['nginx_vhost_conf_dir'].'/default.rewrites.conf'; //* Make a backup copy of vhost file copy($rewrites_file, $rewrites_file.'~'); //* Write vhost file file_put_contents($rewrites_file, $tpl->grab()); $app->log('Writing the nginx rewrites file: '.$rewrites_file, LOGLEVEL_DEBUG); unset($tpl); // Set the symlink to enable the vhost $rewrite_symlink = $nginx_config['nginx_vhost_conf_enabled_dir'].'/default.rewrites.conf'; if(!is_link($rewrite_symlink)) { symlink($rewrites_file, $rewrite_symlink); $app->log('Creating symlink for nginx rewrites: '.$rewrite_symlink.'->'.$rewrites_file, LOGLEVEL_DEBUG); } } function rewrite_delete($event_name, $data) { global $app, $conf; // just run the update function $this->rewrite_update($event_name, $data); } function _getRewriteRules($app) { $rules = array(); $rules = $app->db->queryAllRecords("SELECT rewrite_url_src, rewrite_url_dst FROM proxy_reverse ORDER BY rewrite_id ASC"); return $rules; } } // end class ?> ispconfig3_install/docs/autoinstall_samples/0000775000000000000000000000000015273367323020376 5ustar rootrootispconfig3_install/docs/autoinstall_samples/autoinstall.ini.sample0000775000000000000000000000361315273367323024724 0ustar rootroot[install] language=en install_mode=standard hostname=server1.example.com mysql_hostname=localhost mysql_port=3306 mysql_root_user=root mysql_root_password=ispconfig mysql_database=dbispconfig mysql_charset=utf8mb4 http_server=apache ispconfig_port=8080 ispconfig_use_ssl=y ispconfig_admin_password= create_ssl_server_certs=y ignore_hostname_dns=n ispconfig_postfix_ssl_symlink=y ispconfig_pureftpd_ssl_symlink=y [ssl_cert] ssl_cert_country=AU ssl_cert_state=Some-State ssl_cert_locality=Chicago ssl_cert_organisation=Internet Widgits Pty Ltd ssl_cert_organisation_unit=IT department ssl_cert_common_name=server1.example.com ssl_cert_email=hostmaster@example.com [expert] mysql_ispconfig_user=ispconfig mysql_ispconfig_password=afStEratXBsgatRtsa42CadwhQ join_multiserver_setup=n mysql_master_hostname=master.example.com mysql_master_root_user=root mysql_master_root_password=ispconfig mysql_master_database=dbispconfig mysql_master_ssl=n configure_mail=y configure_jailkit=y configure_ftp=y configure_dns=y configure_apache=y configure_nginx=y configure_firewall=y install_ispconfig_web_interface=y [update] do_backup=yes mysql_root_password=ispconfig mysql_master_hostname=master.example.com mysql_master_port=3306 mysql_master_root_user=root mysql_master_root_password=ispconfig mysql_master_database=dbispconfig reconfigure_permissions_in_master_database=no reconfigure_services=yes ispconfig_port=8080 create_new_ispconfig_ssl_cert=no reconfigure_crontab=yes create_ssl_server_certs=y ignore_hostname_dns=n ispconfig_postfix_ssl_symlink=y ispconfig_pureftpd_ssl_symlink=y ; These are for service-detection (defaulting to old behaviour where all changes were automatically accepted) svc_detect_change_mail_server=yes svc_detect_change_web_server=yes svc_detect_change_dns_server=yes svc_detect_change_xmpp_server=yes svc_detect_change_firewall_server=yes svc_detect_change_vserver_server=yes svc_detect_change_db_server=yes ispconfig3_install/docs/autoinstall_samples/autoinstall.conf_sample.php0000775000000000000000000001020515273367323025734 0ustar rootroot ispconfig3_install/docs/Remote_API_docs.txt0000775000000000000000000000010715274156743020014 0ustar rootrootThe remote API documentation is in remoting_client/API-docs/README.md. ispconfig3_install/docs/Remote_API_changes.md0000775000000000000000000012262515274156743020267 0ustar rootroot# Remote API changes This file lists the changes of the ISPConfig remote API (SOAP and JSON) that callers may notice: values that are accepted or refused, results, permissions, error messages and side effects. New functions are listed in the release notes. Validation errors of add and update functions are returned as a `data_processing_error` fault with the English text of the field's error message, for example `Invalid value for the field server_php_id.`. ## ISPConfig 3.3.3p2 - All add functions: an empty value of a select or radio field without an empty option (for example `ssl_country` of a website) is handled like a field that is not sent (3.3.3: refused with `Invalid value for the field .`). - All update functions: the plugins that run after the update see the stored record together with the sent fields. An update that sends only some fields no longer has side effects of the missing ones; for example `mail_domain_update` without `domain` renamed every mailbox, forward and mailing list of the domain to `@` (before: only callers that sent the whole record were safe). - The examples in `remoting_client/examples` were rewritten for 3.3.3 and cover every function, each with a SOAP and a JSON example; the documentation in `remoting_client/API-docs` is generated from them as Markdown (`remoting_client/API-docs/README.md`, one page per function). The old HTML pages and `rest_example.php` are removed. - `openvz_get_free_ip`: without a free address the fault `no_free_ip` is returned (before: a PHP error and no valid answer). - `dns_zone_set_dnssec`: when `client_id` gives the zone another owner, the records of the zone get that owner too, like with `dns_zone_update` (before: the records stayed with the previous owner; remote API v1 keeps that). - `mail_relay_domain_add`, `mail_relay_domain_update`: a relay domain that exists already on the server is refused with `domain_error_unique` (before: `database_error` with the failed query). - `sites_aps_get_package_details`, `sites_aps_get_package_settings`, `sites_aps_get_package_file`: the answer is for the newest version of the package, like the panel shows it (before: the given version; remote API v1 keeps that). Text that is already UTF-8 is no longer encoded a second time. - `sites_aps_install_package`: `main_domain` = `www.` installs into the website `` with the subdomain www (before: always refused with `error_main_domain`). Like in the panel, `main_domain` must be a website, vhost subdomain or vhost alias domain with a document root (before: any web domain record). - `sites_aps_install_package`: the database user of the instance also works with MySQL 8 (before: the query for its password hash failed there). - `sites_aps_instance_delete`: `keep_database` also takes 1, '1', 'y', 'yes' and 'true' (before: only boolean true kept the database; any other value deleted it). - `sites_aps_update_package_list`: an error of the package crawler is returned as the fault `package_error` (before: the HTML error page of the panel). - `sites_web_domain_update`, `sites_web_vhost_aliasdomain_update`, `sites_web_vhost_subdomain_update`: `log_retention`, `pm_max_children`, `pm_start_servers`, `pm_min_spare_servers` and `pm_max_spare_servers` keep their stored values when they are not sent; a value sent empty still gets the default (before: a value that was not sent was reset to 30, 10, 2, 1 and 5; remote API v1 keeps that). - The get, update and delete functions of mail aliases, forwards, catchalls, alias domains, whitelist and blacklist entries act on records of their own type only: `-1` and filters return only that type, the ID of another type returns nothing, and update and delete refuse it with `invalid_id` (before: any record of the table, e.g. `mail_alias_delete` deleted a forward; remote API v1 keeps that). - `mail_domain_delete` deletes the forwards and aliases, fetchmail accounts, mailboxes with their filters, spamfilter users with their white- and blacklist entries and the mailing lists of the domain, and `mail_user_delete` deletes the spamfilter user, the filters and the fetchmail accounts of the mailbox, like the panel (before: only the domain or mailbox record; remote API v1 keeps that). - `mail_domain_update`: when `client_id` gives the domain another client, the mailboxes, forwards, spamfilter users and white- and blacklist entries of the domain get that client too, like in the panel (before: only the domain changed its owner unless `client_group_id` was sent as well; remote API v1 keeps that). - `sites_web_subdomain_*`, `sites_web_vhost_subdomain_*`, `sites_web_vhost_aliasdomain_*`: the record is checked with the subdomain or alias domain form of the panel, so a wildcard subdomain such as `*.example.com` is accepted and the website-only fields are not part of the vhost subdomain and alias domain records (before: the alias domain or website form; a wildcard subdomain was refused; remote API v1 keeps that). - `sites_web_aliasdomain_add`, `sites_web_subdomain_add`, `sites_web_vhost_aliasdomain_add`, `sites_web_vhost_subdomain_add` store their own record type, a sent `type` is ignored. `sites_web_domain_get` returns websites only (`-1` lists no child domains, the ID of another type returns nothing). The delete functions of websites, alias domains and subdomains and `sites_web_domain_set_status` refuse the ID of another record type with `invalid_id` (before: the type was not checked, e.g. `sites_web_aliasdomain_delete` deleted a website; remote API v1 keeps that). - `sites_web_folder_add`, `sites_web_folder_update`: a path that is already protected in the same website is refused with `data_processing_error` `error_folder_already_protected_txt`; `sites_web_folder_user_add`, `sites_web_folder_user_update`: a user name that exists already in the same folder is refused with `error_user_exists_already_txt`, like in the panel (before: the duplicate was stored; remote API v1 keeps that). - `sites_web_domain_update`, `sites_web_vhost_subdomain_update`, `sites_web_vhost_aliasdomain_update`: `apache_directives`, `nginx_directives` and `proxy_directives`, and `sites_web_aliasdomain_update`, `sites_web_subdomain_update`: `proxy_directives`, sent with their stored value are kept even when the directive check refuses them (e.g. nginx directives of a website on an Apache server); a new or changed value is checked as before (3.3.3: the update was refused with `Nginx directive blocked by security settings:` or the Apache message). ## ISPConfig 3.3.3 ### General - The REST endpoint `remote/rest.php` is removed (it answered every request with status 400 since it was added). The SOAP endpoint `remote/index.php` and the JSON endpoint `remote/json.php` stay. - All add and update functions: values of select, radio and checkbox fields must be one of the options of the field (static options or the options the panel reads from the database). A value that is already stored in the record stays valid on update, fields that are not sent are not checked, checkbox values are compared case-insensitively. Other values are refused with `Invalid value for the field .` (before: stored as sent). `$conf['remote_api_version'] = 1;` in `config.inc.local.php` restores the old behaviour, the default is 2. - All add and update functions: a value checked by a format pattern (for example user names, database names, logins) may no longer end with a line break; before, one trailing line break was accepted and stored. - All functions that return records: the keys `password`, `passwort`, `database_password`, `database_password_sha2`, `database_password_postgres`, `database_password_mongo`, `stats_password`, `otp_data`, `otp_recovery`, `lost_password_hash`, `id_rsa` and `remote_password` are left out of the result at any depth, and the `*_get` functions refuse a filter on one of these keys (`invalid_filter`). `remote_api_password_hashes=yes` in `security_settings.ini` restores the old behaviour. - Datalog entries of records added through the API now carry the record ID in `dbidx` (`:`, before: the ID was empty). - `login`: the third parameter `client_login = true` is no longer supported and refused with `client_login_failed`; sessions of such logins are refused. - `login`: remote users whose stored password is an old MD5 hash can no longer log in (`login_failed`). Set a new password for them in System > Remote Users; the update lists such users. - `login`: a login from an address that is not in the allowed IP addresses of the remote user fails with `login_failed` / `The login failed. Username or password wrong.` (before: `The login is not allowed from `). - `login` from the ISPConfig server itself (127.0.0.1 / ::1): a remote user with "Remote Access" on and a list of allowed addresses needs `127.0.0.1` and `::1` in that list (before: the server itself was always allowed). Users with "Remote Access" off (only from this server) or with an empty list are not affected. - `login` and calls with an unknown or expired session ID: every attempt is counted, more than 10 attempts within 5 minutes from one address give `login_failure_limit`. IPv6 addresses are counted per /64 network, a successful login no longer resets the counter. Clients that retry with expired sessions may reach the limit earlier. - All update functions: a password field that is sent with the value stored in the record (the record read back with the `*_get` function) keeps the password, it is not hashed again (before: only `client_update`). - `get_function_list`: leaves out PHP methods starting with `__` such as `__construct`. - All add and update functions: a domain name or address in a field with IDN conversion that can not be converted to ASCII (for example `-bad`, `bad-`, `a..b` or a label longer than 63 characters) is refused with `Invalid domain name in the field .` (before: the field was stored empty, e.g. a DNS record name). - All `*_get` functions with a filter array: `#OFFSET#` and `#LIMIT#` no longer shift the values of the column filters after them (before: a filter like `#OFFSET#`, `#LIMIT#`, `username` returned no record). - All endpoints: request bodies above 2 MB are refused (SOAP fault `The request is too large`, JSON code `invalid_data`). A gzip or deflate compressed SOAP request counts by its unpacked size. ### Clients - `client_login_get`: limits the attempts per `remote_ip` (more than 6 within 1 minute) and per user name (more than 10 within 5 minutes), both with `error_user_too_many_logins`; successful logins are not counted. Users with an old MD5 password hash are refused. A mail user login (user name with `@`) with a wrong password or an unknown address returns `false` (before: `null`). - `client_add`, `client_update`, `client_template_additional_add`: each entry of `template_additional` must be an additional client template or a template that is already assigned to the client. - `client_add`, `client_update`: `country` is converted to upper case and must be a code of the country list or empty; `default_xmppserver` and `xmpp_servers` must be XMPP servers. - `client_add`: without `limit_cron_type` the client gets `url` (before: the call failed with `Data truncated for column 'limit_cron_type'`). - `client_update`: the additional templates of the client are only changed when `template_additional` is sent (before: every update without it removed the assigned templates), and only after the record was validated (before: a refused update changed them anyway). - `client_update`: without `password` the stored password stays (before: the stored hash was hashed again, the client could no longer log in). - `client_update`: a `password` equal to the stored hash (the record read back with `client_get`) keeps the password (before: the hash was hashed again). - `client_update`: `locked` and `canceled` lock/unlock and cancel the client only when the value differs from the stored one (before: every update with these keys ran the lock or unlock again, e.g. websites the admin had switched off were switched on). - `client_template_additional_get`, `_add`, `_delete`: invalid IDs return the faults `invalid_id`, `invalid_client_id` and `invalid_template_id` (before: a PHP error and no valid answer). - `client_delete_everything`: needs the permissions for `client_delete_everything` and `client_delete`; a missing permission is reported before anything is deleted (before: the records were deleted first). The group of the deleted client is removed from its reseller. - `client_change_password`: a password with a backslash is hashed as the panel login checks it, so the client can log in (before: the login failed). - `client_delete_everything`: also deletes the WebDAV users, mail transports, spam filter policies, protected folders and folder users of the client. - `client_login_get`: users whose panel login is deactivated (`sys_user.active` not 1; for an email login the panel user of the client) are refused like in the panel login. `country` is the country of the client (before: always `de`), users without client keep `de`. - `client_template_additional_delete`: `assigned_template_id` is the ID of the assignment (`client_template_assigned.assigned_template_id`, the number before the colon in the client's `template_additional` entries), so one of two assignments of the same template can be removed (before: the template ID). `$conf['remote_api_version'] = 1;` restores the old behaviour. - `client_update`: for a client with a master template (`template_master` > 0), a changed value of a field the template sets is refused with `data_processing_error` (before: accepted and overwritten by the template later); unchanged values pass. `$conf['remote_api_version'] = 1;` restores the old behaviour. - `client_add`: omitted checkbox fields (e.g. `force_suexec` and the feature switches) and default servers get the default of the panel form, as when the client is added in the panel; omitted limits stay 0. `$conf['remote_api_version'] = 1;` restores the old behaviour. - `client_get_all`: returns an empty array when there are no clients (before: `false`). `$conf['remote_api_version'] = 1;` restores the old behaviour. - `client_add`, `client_update`: with `_ispconfig_pw_crypted = 1`, a client or reseller password hash that PHP `crypt()` can not verify is refused with `data_processing_error` (such a hash never allowed a login). - `domains_domain_delete`, `domains_domain_update`: a domain of the domain module that is used by a DNS zone, secondary zone, mail domain or website (also as parent of a subdomain) can not be deleted or renamed (`domain_in_use` fault, as in the panel); an unused entry can still be renamed. `$conf['remote_api_version'] = 1;` restores the old behaviour. ### Websites - `sites_web_domain_*`, `sites_web_vhost_subdomain_*`, `sites_web_vhost_aliasdomain_*` (add and update): - `apache_directives`, `nginx_directives` and `proxy_directives` are checked against the lists of blocked directives in more cases (quoted directives, continued Apache lines, several nginx directives on one line, `TransferLog`, `RewriteMap`, `${...}`, nginx `include`, `error_log`, `access_log` other than `off`, and the nginx temp path directives such as `client_body_temp_path`). A missing or unreadable list blocks all directives. The blocked lines in the error message are HTML-escaped. - `ip_address` must be `*` (when the IP wildcard is enabled for the server) or an IPv4 address of the server with "HTTP NameVirtualHost", `ipv6_address` empty or such an IPv6 address; subdomains and alias domains may use the IP of their website. `server_php_id` must be 0 or an active PHP version of the server for the PHP mode of the website that the client may use. `parent_domain_id` of a website must be 0. - `ssl_domain` must be a host name, optionally starting with `*.`. - `domain` (also of subdomains and alias domains) must consist of labels: empty labels such as `a..b.com` or `.b.com` are refused. `web_folder` of a subdomain or alias domain may have 1 character, but not `.`. - `web_folder` of a subdomain or alias domain must start with a letter, a digit, `_`, `.` or `-`. - `domain`, `redirect_path` and `web_folder` may not end with a line break. - `document_root` must be an absolute path without a `..` segment, `allow_override` an AllowOverride value (letters, digits, `=`, `,` and spaces), `php_open_basedir` empty or absolute paths separated by `:` (also `*`). A stored value that does not match is accepted when it is sent back unchanged (an update with the whole record keeps working). - When `client_group_id` changes the owner, `sys_userid` of the record is set to the user of the API session. - `custom_php_ini` of websites, subdomains and alias domains: lines whose key is empty or contains other characters than letters, digits, `.` and `_` are not written into the PHP-FPM pool (a warning is logged on the server); the panel refuses such lines. - `sites_web_vhost_subdomain_add` and `sites_web_vhost_aliasdomain_add`: the record gets the document root, system user and system group of its website (before: `-`), as in the panel. - `sites_web_domain_delete`, `sites_web_vhost_subdomain_delete`, `sites_web_vhost_aliasdomain_delete`: deleting a website also deletes its subdomains and alias domains, FTP, shell and WebDAV users, cron jobs, backups, APS instances, protected folders and their users and its traffic statistics, and unlinks its databases (`parent_domain_id = 0`), as in the panel. Deleting a subdomain or alias domain deletes its protected folders. - `sites_web_domain_update` with a new `domain`: only the subdomains and alias domains of this website are renamed, the traffic statistics move to the new names. - Websites with Let's Encrypt and automatic CAA records: the CAA record is only created in a DNS zone of the website's owner. - `sites_webdav_user_add`, `sites_webdav_user_update`: the password is stored as the digest the panel uses, so the user can log in. Callers that send the digest already must also send `_ispconfig_pw_crypted=1`. - `sites_database_user_add`, `sites_database_user_update`: `server_id` 0 (all database servers) is accepted. - `ftptrafficquota_data`: the FTP traffic of the pure-ftpd log is counted once (before: it could be counted several times). - `sites_web_domain_add`, `sites_web_vhost_subdomain_add`, `sites_web_vhost_aliasdomain_add`: without `php_fpm_use_socket` the website uses the PHP-FPM socket (`y`, as in the panel; before: `n`, a TCP port). - `ftptrafficquota_data`: returns the FTP traffic of `this_month`, `this_year`, `last_month`, `last_year` and `lastdays` (before: the values were always empty). - `databasequota_get_by_user`: `used_raw` is the size of the database on its own server (before: the size of a database with the same name on another server could be returned). - `databasequota_get_by_user`: `database_quota_raw` and `used_percentage` use MB × 1024 × 1024, the unit the servers use for the quota check (before: MB × 1000 × 1000). - `trafficquota_get_by_user`, `ftptrafficquota_data`: every website has the keys `this_month`, `this_year`, `last_month`, `last_year` (and `lastdays` when requested), 0 for a period without traffic (before: the key was missing). `lastdays` is also accepted as a string, for example `"7"` (before: ignored). - `sites_web_domain_add`, `sites_web_vhost_aliasdomain_add`, `sites_web_vhost_subdomain_add` and their `_update`: an empty `subdomain` is stored as `none` (before: a database error or an empty value). - `sites_shell_user_add`, `sites_shell_user_update`: an empty `chroot` is stored as `no` (`_add` also without `chroot`; before: an empty string). - `sites_shell_user_add`, `sites_shell_user_update`: `ssh_rsa` must contain public keys in authorized_keys format (one per line; options before the key and `#` comment lines allowed); private keys and other text are refused (`data_processing_error`, message `ssh_rsa_error`). - `sites_web_aliasdomain_get`, `sites_web_subdomain_get`, `sites_web_vhost_aliasdomain_get`, `sites_web_vhost_subdomain_get`: return only records of their type: the ID of another web domain returns an empty array, `-1` returns all records of the type (before: all web domains), a filter array gets the type added. `$conf['remote_api_version'] = 1;` restores the old behaviour. - `sites_web_domain_update`, `sites_web_vhost_aliasdomain_update`, `sites_web_vhost_subdomain_update`, `sites_web_aliasdomain_update`, `sites_web_subdomain_update`: the ID of a web domain of another type is refused with `invalid_id`, and `type` in the parameters is ignored (before: the record type could be changed). A new `parent_domain_id` of a vhost subdomain or alias domain now always sets its document root and website user to those of the new website (before: only when `type` was sent), and the server moves its folder. - `sites_web_vhost_aliasdomain_update`, `sites_web_vhost_subdomain_update`, `sites_web_aliasdomain_update`, `sites_web_subdomain_update`, `sites_database_update`: the record keeps its owner, `client_id` no longer moves it to another client; an alias domain or subdomain moved to another website gets the owner of that website, as in the panel. `$conf['remote_api_version'] = 1;` restores the old behaviour. - `quota_get_by_user`, `databasequota_get_by_user`: return only the records of the client's groups (before: also records of other clients that are readable by all users). - `sites_web_domain_add`: `readonly` also accepts `1`, `"1"`, `"y"`, `"yes"` and `"true"` (before: only the boolean `true`, other values were ignored). - `sites_ftp_user_add`, `sites_ftp_user_update`: `quota_files`, `ul_ratio`, `dl_ratio`, `ul_bandwidth` and `dl_bandwidth` must be empty, `-1` or a number (before: other values were stored as 0); `uid` and `gid` are checked without trimming, so a value with spaces or a line break is refused. - `sites_web_domain_add`, `sites_web_domain_update` (and the vhost subdomain/alias functions): `http_port` and `https_port` must be 1 to 65535. - `sites_webdav_user_add`, `sites_webdav_user_update`: `dir` must be a folder name (letters, digits, `_`, `-`, `.`, not starting with a dot, up to 64 characters). - A stored value of these fields is accepted when it is sent back unchanged. ### Databases - `sites_database_add`: when a database of that name exists already on the server, the server removes the new record again and leaves the existing database unchanged; a rename to the name of an existing database keeps the old name in the record. MySQL refuses `sys` (besides `mysql`, `information_schema` and `performance_schema`), PostgreSQL refuses `postgres`, `template0` and `template1`. - `sites_database_user_add`, `sites_database_user_update`: a user whose account exists already on the database server and was not created by ISPConfig gets no rights and keeps its password; a rename to the name of such an account keeps the old name in the record. - `sites_database_add`, `sites_database_update`: the read/write and the read-only user must belong to the client of the website (`parent_domain_id`), as in the panel; otherwise the call is refused with `database_client_differs` / `The client of the parent web and the database do not match.` (before: accepted). `$conf['remote_api_version'] = 1;` restores the old behaviour. - `sites_database_add`, `sites_database_update` (MySQL): host names in `remote_ips` are granted together with the IP addresses; an empty list allows every host. A list with an entry that is neither an IP address nor a host name (such as `192.168.1.%`) is refused with `database_remote_error_ips` (before: accepted, the check ran only for panel forms); such entries stored by an older version are not granted. - PostgreSQL: after a change of `database_user_id` the new user owns the tables, views and sequences of the database; other databases of the old user keep their owner. - `sites_database_add`, `sites_database_update`: `backup_format_web` and `backup_format_db` are ignored (before: the call failed with a database error, the columns do not exist). - `sites_database_update` without `backup_interval` keeps the stored backup interval (before: it was cleared to none). - `sites_database_get_all_by_user`: every database is returned once (before: once per user of the client's group, e.g. twice for the admin group with two admin users). - `sites_web_domain_backup`, `mail_user_backup`: a `primary_id` that is not an integer is refused with `invalid_backup_id` (before: the trailing text was ignored). - `sites_database_user_add`, `sites_database_user_update`: a sent plain `database_password` also sets the SHA2 and PostgreSQL passwords of the user, as in the panel (before: they kept the old or no password). Not with `_ispconfig_pw_crypted = 1` or when the stored hash is sent back. ### Mail - `mail_blacklist_*`, `mail_whitelist_*` (add and update): `access` must be a Postfix access action: `OK`, `REJECT`, `DUNNO`, `DISCARD`, `HOLD`, `DEFER`, `DEFER_IF_REJECT`, `DEFER_IF_PERMIT` or a 4xx/5xx code, optionally followed by one line of text. A stored value is accepted when it is sent back unchanged. - `mail_domain_add`, `mail_domain_update`: `relay_host` must be empty or a list of next hops (`host`, `[host]`, `[ipv6:...]`, each with an optional `:port`, separated by commas), `relay_user` one line without `:`, `relay_pass` one line. A stored value is accepted when it is sent back unchanged. - `mail_user_add`, `mail_user_update`: passwords with non-ASCII characters are hashed from their UTF-8 bytes, so mail clients can log in with them. - `mail_alias_*`, `mail_forward_*`, `mail_aliasdomain_*`, `mail_catchall_*` (add and update): `type` must be `alias`, `forward`, `aliasdomain` or `catchall` according to the function. - `mail_transport_*`, `mail_spamfilter_user_*` (add and update): `server_id` must be a mail server that is not a mirror; `mail_spamfilter_user_*`: `policy_id` must be 0 or an existing policy, `local` is converted to upper case. - `mail_policy_add`, `mail_policy_update`: the Y/N fields are converted to upper case and must be `Y` or `N`. - `mail_policy_add`, `mail_policy_update`, `mail_policy_get`: new field `rspamd_greylisting` (`y`/`n`, default `n`), the greylisting of the policy with Rspamd (before: not part of the form, a sent value was ignored). - `mail_spamfilter_whitelist_*`, `mail_spamfilter_blacklist_*` (add and update): `email` may not contain spaces, control characters, `"` or `\`. - `mail_spamfilter_whitelist_*`, `mail_spamfilter_blacklist_*`: the functions of a list only read, change and delete entries of that list. `_add` and `_update` store `wb` of the function (`W` or `B`), a `wb` parameter is ignored; `_get` with `-1` or a filter array returns only entries of the list, an ID of the other list returns `null`; `_update` and `_delete` refuse an entry of the other list with `invalid_id` / `The entry is not a whitelist entry.` (or `blacklist`). `$conf['remote_api_version'] = 1;` restores the old behaviour. - `mail_user_filter_add`, `mail_user_filter_update`: line breaks in `searchterm` are replaced by spaces, and quotes and backslashes are escaped in the generated Sieve script. - `mail_user_filter_add`, `mail_user_filter_update`: a filter with the operator `regex` and a search term that is no valid POSIX regular expression (as Dovecot reads it from the Sieve string) is saved, but its rule in the Sieve script never matches (before: the whole Sieve script of the mailbox failed). - `mail_domain_set_status`: the change goes through the datalog, so the servers apply it; the answer is 1 when the status changed and 0 otherwise (before: the record changed only in the database). - `mail_relay_domain_add`, `_get`, `_update`, `_delete`: accept the remote permission of the relay domain functions as well as the old one of the relay recipient functions. - `mail_user_update` without `email`: the mail domain check is skipped (before: a PHP warning). - `mail_user_add`: without `maildir` or `homedir` they are built from the mail server settings, as in the panel (before: stored empty, the server did not create the mailbox). - `mail_user_backup_list`: the mail domain ID filters the list as documented (before: always all backups). - `mailquota_get_by_user`: `last_access` is the Unix timestamp (0 = never) and `name` is returned as stored (before: a date in the panel language or a "never" text, and the name with HTML entities). It returns only the mailboxes of the client's groups. `$conf['remote_api_version'] = 1;` restores the old formatting. - `mail_user_*`, `mail_alias_*`, `mail_forward_*`, `mail_catchall_*`, `mail_user_filter_*` (add and update): the record gets the owner of its mail domain, as in the panel; updates keep the owner (before: the client of `client_id` became the owner). `$conf['remote_api_version'] = 1;` restores the old behaviour. - `mail_user_add`: without `maildir_format` the mailbox gets the maildir format of the mail server (before: always `maildir`). - `mail_user_update`: a sent `maildir_format` is ignored, as in the panel; the server keeps the existing mail in its format (before: stored, and the mailbox looked empty). `$conf['remote_api_version'] = 1;` restores the old behaviour. - `mail_user_filter_add`, `mail_user_filter_update`: a `target` that starts with `/` or has an empty, `.` or `..` part is refused (`target_error_path`). On mail servers with the maildrop filter syntax, a rule with the operator `regex` never matches. - `mail_domain_add`, `mail_domain_update`: `dkim_public` is always the public key of `dkim_private` (a sent value is ignored, empty without a readable private key); with `dkim` = `y` an invalid `dkim_private` is refused (`dkim_private_key_error`; before: not checked for API calls). An unchanged stored private key is accepted. - `mail_domain_update`: a rename or owner change moves only the mailboxes, aliases, mailing lists, fetchmail accounts and spam filter users on the server of the mail domain (before: those with the domain name on all servers). Forwards of other records whose destination is an address of the domain keep their owner, their destination gets the new name only when they belong to the old owner of the domain (before: all of them got the new name and the domain's owner). Only whole addresses are renamed (before: `str_replace` on the text). - `mail_transport_add`, `mail_transport_update`: `transport` must be one line `name:nexthop` (or `name`) with a transport name of letters, digits, `.`, `_` and `-` (`transport_error_format`). - `mail_policy_add`, `mail_policy_update`: the `*_quarantine_to` fields must be empty, a name or an address, the `addr_extension_*` fields a name, the `*_admin` fields an email address or empty, `banned_rulenames` a comma separated list of names. - `mail_spamfilter_user_add`, `mail_spamfilter_user_update`: `email` must be an address, `user@`, `@domain`, `@.domain`, `@` or `@.`. - `mail_user_add`, `mail_user_update`: `maildir` must be below the mail home or the maildir path of the mail server, `homedir` an absolute path without `.`/`..` parts, `uid`/`gid` `-1` or a number from 1, `maildir_format` `maildir` or `mdbox`, `imap_prefix` empty or a name followed by `.` or `/`, `custom_mailfilter` without control characters (tab and line breaks allowed); `cc` addresses may have digits in the top level domain. - `mail_forward_add`, `mail_forward_update`: `destination` must be email addresses (before: not checked for API calls). - `mail_aliasdomain_add`, `mail_aliasdomain_update`: `destination` must be `@domain` like `source`. - `mail_relay_recipient_add`, `mail_relay_recipient_update`: `source` must be an address or `@domain`, `access` must be `OK`. - `mail_whitelist_add`, `mail_whitelist_update`, `mail_blacklist_add`, `mail_blacklist_update` (Postfix lists): `source` must be a host name or IP for the type `client`, otherwise an address, `user@`, `@domain` or a domain. - `mail_filter_add`, `mail_filter_update` (Postfix header/body checks): `pattern` and `data` must be one line without control characters. - `mail_catchall_*`, `mail_mailinglist_*`, `mail_fetchmail_*`: top level domains may contain digits and have up to 63 characters. - A stored value of these fields is accepted when it is sent back unchanged (except the mail filter target). ### DNS - `dns__get`, `_add`, `_update`, `_delete`: the functions of a record type only read, change and delete records of that type. `_get` with `-1` or a filter array returns only records of the type, an ID of another type returns `null`; `_update` and `_delete` refuse a record of another type with `invalid_id`; `_add` and `_update` store the type of the function, a `type` parameter is ignored. - `dns__add`, `dns__update`: `name` and `data` may not contain line breaks. - `dns__add`, `dns__update`: `server_id` of the record is set to the server of its zone, a sent `server_id` is ignored; a `zone` that does not exist is refused with `invalid_zone` / `The zone does not exist.` (before: both were stored as sent). - `dns__update` with `update_serial`: the serial of the record's zone is increased also when `zone` is not in the parameters (before: the serial stayed). - `dns__add`, `_update`, `_delete` with `update_serial`: the serial is increased without the zone functions; a remote user with only the record functions of the type no longer gets `permission_denied`. Only the serial of the zone is written (before: the whole zone was saved again through `dns_zone_update`). - `dns_zone_add`, `dns_zone_update`: `also_notify` takes single IP addresses only; networks in `xfer` must be network addresses (`192.168.1.0/24`, not `192.168.1.5/24`). - `dns_zone_delete`: the records of the zone are deleted as well, as in the panel (before: they stayed in the database). - `dns_templatezone_add`: `ip` must be a valid IPv4 address, `ipv6` empty or a valid IPv6 address, `email` may not contain spaces, `"`, `|` or `\`; the values are inserted into the fields of the template records only. - `dns_mx_*`, `dns_naptr_*` (add and update): `aux` must be 0 to 65535. - `dns_a_*`, `dns_aaaa_*`, `dns_hinfo_*`: `name` may have up to 255 characters; `dns_srv_*`: the target in `data` up to 255 characters; `dns_tlsa_*`: `name` may be `_._` without a host part. - `dns_slave_add`, `dns_slave_update`: `xfer` accepts networks and `any` as for primary zones. - `dns_templatezone_add`: a template with an unknown section returns an error (before: the answer was a "Unknown section type" page and no valid JSON/SOAP answer). - `dns_zone_set_status`: the change goes through the datalog, so the servers apply it; the answer is 1 when the status changed and 0 otherwise (before: the record changed only in the database). - `dns_templatezone_get_all` without the permission returns the `permission_denied` fault (before: a PHP fatal error). - `dns_zone_add`, `dns_zone_update`: an `origin` without a trailing dot gets one. - `dns_*_add`, `dns_*_update`: a missing or invalid `stamp` is replaced by the current time (before: a zero date or a database error); the examples no longer send `CURRENT_TIMESTAMP`. - `dns_templatezone_add`: a zone that exists already is refused with an error (before: a second zone with the same name was created). - `dns_cname_add`, `dns_dname_add`, `dns_alias_add`, `dns_mx_add`, `dns_ns_add`, `dns_ptr_add`, `dns_srv_add` (and the `_update` functions), `dns_zone_add`/`_update` (`ns`): an IPv4 address as target or primary name server is refused (`data_processing_error` with the existing regex message; such records never resolved). - `dns__add`, `dns__update`: the record gets the owner of its zone, updates keep the owner; `dns_zone_update` with a new owner moves the records of the zone along, as in the panel (before: the client of `client_id` became the owner, the records stayed). `$conf['remote_api_version'] = 1;` restores the old behaviour. - `dns_templatezone_add`: the zone is created on the default DNS server of the client when it is one of the client's DNS servers (before: always on the default DNS server of the system). `$conf['remote_api_version'] = 1;` restores the old behaviour. - `dns_rp_*`, `dns_ds_*`, `dns_sshfp_*`, `dns_loc_*`, `dns_hinfo_*` (add and update): `data` must have the structure of the record type (RP: two names; DS: key tag, algorithm, digest type, hex digest; SSHFP: algorithm, type, hex fingerprint; LOC: the RFC 1876 text format; HINFO: two strings), refused with the regex error message of the field (before: stored, and the zone was not published any more). - `dns_txt_add`, `dns_txt_update`: `data` must be one or more quoted strings as written into the zone file (quotes and backslashes escaped, several strings as `a" "b`); an unchanged stored value is accepted. The server leaves records with unbalanced quotes or `(`, `)` or `;` outside quotes out of the zone file. - `dns_naptr_*`: the replacement must be `.` or a host name. `dns_caa_*`: `data` must be flags (0 or 128), a tag and a quoted value without quotes and backslashes (or one word). Unchanged stored values are accepted. - `dns_zone_add`, `dns_zone_update`, `dns_slave_add`, `dns_slave_update`: a `/` in `origin` is allowed only in the first label (RFC 2317), a `_` only at the start of a label other than the last one (e.g. `_acme-challenge.example.com`); `update_acl` must be a list of IP addresses or networks, `key ` and ACL names, each optionally with `!`, separated by `,` or `;` (an unchanged stored value is accepted). - `dns_templatezone_add`: the zone values of the template (origin, name servers, mailbox, update_acl, TXT records) get the checks of the zone and TXT record functions, the SOA times are numbers. - `dns_srv_add`, `dns_srv_update`: weight, port and target are stored as checked. ### Server and system - `server_config_set`, `system_config_set`, `server_ip_add`, `server_ip_update`, `server_ip_delete`: refused with `permission_denied` when `admin_allow_server_config`, `admin_allow_system_config` or `admin_allow_server_ip` in `security_settings.ini` is `no` (default `superadmin`: no change). - `sys_datalog_get`, `sys_datalog_get_by_tstamp`: need the new remote permission "Datalog functions"; the update grants it to remote users with the server functions. The returned data leaves out the keys listed under General. - `update_record_permissions`: `permissions` must be a non-empty array, otherwise `invalid parameters`. - `update_record_permissions`: when `index_field` matches several rows, every row is changed and gets its own datalog entry, so the servers apply the change to all of them (before: the database changed all rows, the servers only one). Tables without a single-column primary key are refused with `invalid parameters`. - `system_config_get`, `system_config_set` (section `mail`): new key `smtp_accept_invalid_cert` (`y`/`n`). - `server_get_serverid_by_ip`: finds an IPv6 address also when it is stored in another notation. - `server_get_app_version` with a server ID returns the version of the newest monitor record of that server. - `monitor_jobqueue_count`: a mirror server also counts the pending jobs of its master server. - `sys_datalog_get`: `newer` also accepts `1`, `"1"` and `"true"` (before: only boolean `true`, so JSON and SOAP clients got only the one entry). - `server_ip_delete`: refused with `ip_in_use` while a website of the server uses the address. `$conf['remote_api_version'] = 1;` restores the old behaviour (the address is deleted). - `server_config_set`, `system_config_set`: `section` and `key` must consist of letters, digits and `_`, otherwise `invalid_function_parameter` (in every API version). - `server_config_set`, `system_config_set`: a value of a field of the System > Server Config or System > Interface > Main Config form is checked like in the panel (filters, validators and the options of select, radio and checkbox fields); a refused value gives `data_processing_error` with the field's error message. A value that is already stored is accepted unchanged, keys that are not fields of the form are stored as before. The checks of many path, host, port and list fields are stricter in 3.3.3 (panel and API). `$conf['remote_api_version'] = 1;` stores the value without these checks. ### Virtual servers (OpenVZ) - `openvz_vm_*`, `openvz_template_*`, `openvz_ostemplate_*` (add and update): `hostname` must be a host name (`{VEID}` allowed), `nameserver` IP addresses separated by spaces, `capability` and `features` lists of `name:on` / `name:off`, `iptables` module names, `io_priority` 0 to 7, the resource limits of templates a number or `unlimited` (optionally `barrier:limit`), `custom` lines that are empty, comments or `KEY="value"` / `KEY=value` without quotes, backticks, backslashes and `$` (except `$VEID`) in the value, `template_file` a file name. A stored value is accepted when it is sent back unchanged. - `openvz_vm_add`, `openvz_vm_update`: `ostemplate_id` must be an existing OS template, `ip_address` an IP of the server that is not reserved and free or used by this virtual server, each `additional_ip` 0 or such an IP. - `openvz_vm_add`, `openvz_vm_update`: no longer fail on new installations (the column `iptables` was named `iptabless`, the update renames it). - `openvz_vm_update`: a new `template_id` copies the values of the VM template to the virtual server; a new `ostemplate_id` no longer does. - `openvz_vm_add`: the virtual server is set up as in the panel: it gets the next free VEID (a sent `veid` is replaced), the values of the VM template, its IP address and additional IPs are assigned, the OpenVZ config is written and, with `create_dns`, the DNS record is added (before: the record was stored as sent, without config and without IP assignment). `$conf['remote_api_version'] = 1;` restores the old behaviour. ispconfig3_install/docs/INSTALL.txt0000775000000000000000000000017015114346020016144 0ustar rootroot The installation instructions for ISPConfig can be found here: https://www.ispconfig.org/page/en/documentation.html ispconfig3_install/docs/AUTOUPDATE.md0000775000000000000000000001465715152616670016326 0ustar rootroot# ISPConfig Automatic/Unattended Updates This guide explains how to set up and use automatic (unattended) updates for ISPConfig servers. ## Overview ISPConfig supports unattended updates using a configuration file that pre-answers all update prompts. This is useful for: - Automated server maintenance - Scripted updates across multiple servers - CI/CD pipelines - Reducing human error during updates ## Quick Start 1. **Create the autoinstall configuration file:** ```bash cp /usr/local/ispconfig/docs/autoinstall_samples/autoinstall.conf_sample.php /usr/local/ispconfig/server/lib/autoinstall.conf.php ``` 2. **Edit the configuration file** with your settings (see Configuration section below) 3. **Run the update:** ```bash ispconfig_update.sh --autoinstall=/usr/local/ispconfig/server/lib/autoinstall.conf.php ``` Or using the CLI: ```bash ispc update --autoinstall=/usr/local/ispconfig/server/lib/autoinstall.conf.php ``` ## Configuration File The configuration file can be either: - **PHP format** (`autoinstall.conf.php`) - Recommended, allows dynamic values - **INI format** (`autoinstall.ini`) - Simple key-value pairs ### PHP Format Example ```php ``` ### Configuration Options Reference | Option | Values | Default | Description | |--------|--------|---------|-------------| | `do_backup` | yes, no | yes | Create backup before update | | `mysql_root_password` | string | - | MySQL root password for local server | | `mysql_master_hostname` | string | - | Master DB hostname (multiserver only) | | `mysql_master_port` | string | 3306 | Master DB port (multiserver only) | | `mysql_master_root_user` | string | root | Master DB root username | | `mysql_master_root_password` | string | - | Master DB root password | | `mysql_master_database` | string | dbispconfig | Master DB database name | | `reconfigure_permissions_in_master_database` | yes, no | no | Reconfigure DB permissions | | `reconfigure_services` | yes, no, selected | yes | Reconfigure all services | | `ispconfig_port` | number | 8080 | ISPConfig web interface port | | `create_new_ispconfig_ssl_cert` | yes, no | no | Generate new SSL certificate | | `reconfigure_crontab` | yes, no | yes | Update crontab entries | | `create_ssl_server_certs` | y, n | y | Create SSL server certificates | | `ignore_hostname_dns` | y, n | n | Ignore hostname DNS check | | `ispconfig_postfix_ssl_symlink` | y, n | y | Create Postfix SSL symlink | | `ispconfig_pureftpd_ssl_symlink` | y, n | y | Create PureFTPd SSL symlink | | `svc_detect_change_*` | yes, no | yes | Auto-accept service detection changes | ## Helper Script A helper script is available to generate the configuration file: ```bash /usr/local/ispconfig/server/scripts/generate_autoinstall_conf.sh ``` This script will: 1. Read your current ISPConfig configuration 2. Prompt for any sensitive values (passwords) 3. Generate a ready-to-use `autoinstall.conf.php` file ## Security Considerations ⚠️ **Important Security Notes:** 1. **Protect the configuration file** - It contains sensitive passwords: ```bash chmod 600 /usr/local/ispconfig/server/lib/autoinstall.conf.php chown root:root /usr/local/ispconfig/server/lib/autoinstall.conf.php ``` 2. **Consider using environment variables** for passwords in the PHP config: ```php $autoupdate['mysql_root_password'] = getenv('MYSQL_ROOT_PASSWORD'); ``` 3. **Do not commit** the configuration file to version control 4. **Test updates** on a staging server before production ## Multiserver Setup For multiserver setups, update servers in this order: 1. Enable maintenance mode on the master 2. Update the **master server first** 3. Update all slave servers 4. Disable maintenance mode Each slave server needs the master database credentials in its configuration file. ## Cron-based Automatic Updates To schedule automatic updates (use with caution): ```bash # Edit root's crontab crontab -e # Add weekly update on Sunday at 3 AM 0 3 * * 0 /usr/local/bin/ispconfig_update.sh --autoinstall=/usr/local/ispconfig/server/lib/autoinstall.conf.php >> /var/log/ispconfig/update_cron.log 2>&1 ``` **Recommendation:** Only use automated cron updates if you have: - Proper backup systems in place - Monitoring to detect update failures - A staging environment to test updates first ## Troubleshooting ### Update fails with "Unable to connect to mysql server" - Verify `mysql_root_password` is correct - Check MySQL is running: `systemctl status mysql` ### Master database connection fails - Verify master server is accessible from slave - Check firewall rules allow MySQL connections - Verify `mysql_master_*` credentials are correct ### Configuration file not found - Use absolute path: `--autoinstall=/full/path/to/autoinstall.conf.php` - Verify file exists and is readable by root ## See Also - Sample configuration: `docs/autoinstall_samples/autoinstall.conf_sample.php` - ISPConfig documentation: https://www.ispconfig.org/documentation/ ispconfig3_install/docs/examples/0000775000000000000000000000000015114346020016112 5ustar rootrootispconfig3_install/docs/examples/blacklist_helo.master0000775000000000000000000001404015114346020022310 0ustar rootroot# blacklist_helo - after permit_sasl, used to stop common spammers/misconfigurations # # This file can be used to block hostnames used in smtp HELO command which are known bad. # Occasionally you will run into legitimate mail servers which are misconfigured and end # up blocked here, so this is not enabled by default, but it is useful if you are prepared # to address those cases. .local is particularly problematic, and commented out by default. # # Note that any server hitting this check is misconfigured, all of the names below are bogus # and not allowed per RFC 2821. # # If your own users are blocked by this, they are not authenticating to your server when # sending (this check is after permit_sasl, which permits authenticated senders). # # Instructions: # # Copy this file to /usr/local/ispconfig/server/conf-custom/install/blacklist_helo.master, # as well as /etc/postfix/blacklist_helo, so your changes are not overwritten with ispconfig # updates. # probably just put REJECT lines in here, # as OK lines will bypass a lot of other checks you may want done # (use DUNNO instead of OK) # # common for spammers (check https://data.iana.org/TLD/tlds-alpha-by-domain.txt and remove valid tld's occasionally) /.*\.administrator$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.admin$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.adsl$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.arpa$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.bac$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.coma$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dhcp$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dlink$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dns$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.domain$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dynamic$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dyndns\.org$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.dyn$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.firewall$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.gateway$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.home$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.internal$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.intern$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.janak$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.kornet$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.lab$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.lan$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.localdomain$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.localhost$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. # .local is used by spammers a lot, but too many otherwise legit servers hit it # (instead of REJECT, should send to greylisting) #/.*\.local$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.loc$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.lokal$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.mail$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.nat$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.netzwerk$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.pc$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.privat$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.private$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.router$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.setup$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.119$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.beeline$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.cici$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.gt_3g$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.gt-3g$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.hananet$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.skbroadband$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. /.*\.tbroad$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. ispconfig3_install/extensions/0000775000000000000000000000000015114346020015543 5ustar rootrootispconfig3_install/extensions/empty.dir0000775000000000000000000000000015114346020017372 0ustar rootrootispconfig3_install/helper_scripts/0000775000000000000000000000000015273367323016411 5ustar rootrootispconfig3_install/helper_scripts/gentoo_setup.sh0000775000000000000000000005413515114346020021454 0ustar rootroot#!/bin/bash # Copyright (c) 2009, Scott Barr # All rights reserved. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions are met: # * Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # * Redistributions in binary form must reproduce the above copyright # notice, this list of conditions and the following disclaimer in the # documentation and/or other materials provided with the distribution. # * Neither the name of the nor the # names of its contributors may be used to endorse or promote products # derived from this software without specific prior written permission. # # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ''AS IS'' # AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE # DISCLAIMED. IN NO EVENT SHALL BE LIABLE FOR ANY # DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES # (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; # LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND # ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS # SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. # Global vars install_mail="no" install_web="no" install_ftp="no" install_dns="no" spinner_pid=0 version="0.7" source_path=`dirname $0` source ${source_path}/utils.sh function package_has_use_flag() { local package=$1 local useflag=$2 res=`equery -C -N uses $package | grep -o -P "^ [-+]{1} \+ $useflag"` [ -n "$res" ] } function package_is_emerged() { local package=$1 installed=`equery -C -N list -e -i $1 | grep $1 | grep "^\[I"` [ -n "$installed" ] } function is_package_installed() { local usechange="no" local uselist="" package_is_emerged "$1" installed=$? if [ -n "$2" ] # Use flags parsed then for useflag in $2 do uselist="$uselist +$useflag" # If the use flag isn't currently set or wasn't enabled when installed we'll need to re-install it. package_has_use_flag "$1" "$useflag" || usechange="yes" done flagedit $1 $uselist --nowarn fi [ $installed -eq 0 ] && [ "$usechange" == "no" ] } function install_progress() { SP_STRING="/-\\|" packages=( $2 ) IP_STRING=`printf "1 of %d" "${#packages[@]}"` loop_count=0 nowf=`date +'%b %d, %Y %H:%M'` while [ -d /proc/$1 ] && [ -d /proc/$$ ] do printf "\e[1;37m\e7[ %1.1s %s ] \e8\e[0m" "$SP_STRING" "$IP_STRING" sleep 0.2 if [ $loop_count -lt 8 ] then loop_count=$(($loop_count+1)) else current=`sed -n "/Started emerge on: $nowf/,/G/p" /var/log/emerge.log | grep ">>> emerge" | tail -1 | grep -m 1 -o -P "\d+ of \d+"` if [ -n "$current" ] then IP_STRING=$current fi loop_count=0 fi SP_STRING=${SP_STRING#"${SP_STRING%?}"}${SP_STRING%?}; done printf "%-15s" " " } function install_packages() { local package_list=$1 local title=$2 if [ -z "$title" ] then title="Installing packages" fi if [ -n "$package_list" ] then echo -e "The following packages are going to be emerged (not including dependencies):" echo -e "$package_list" echo -e "" countdown "00:00:10" Continue in echo -e "" printf "%-40s" "$title" (emerge $package_list >/dev/null 2>&1) & pid=$! install_progress $pid "$package_list" wait $pid status=$? if [ $status -eq 0 ]; then echo -e "\e[1;37m[ \e[0m\e[1;32mok\e[0m\e[1;37m ] \e[0m" else echo -e "\e[1;37m[ \e[0m\e[1;31mfailed\e[0m\e[1;37m ] \e[0m" echo -e "Failed installing the following packages:" echo -e "$1" exit 1 fi else echo -e "No packages to install!" fi } function install_rcscripts() { if [ -n "$1" ] then for rc in $1 do res=`rc-status default | grep "$1" | grep -v grep` if [ -z "$res" ] then printf "\e[1;37m%-40s\e[0m" "Adding $rc to default runlevel" start_spinner rc-update add $rc default &> /dev/null stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" fi done fi } function enable_apache_module() { local apache_conffile='/etc/conf.d/apache2' if [ -n "$1" ] then source $apache_conffile if [ $(expr "$APACHE2_OPTS" : ".*$1.*") == "0" ] then APACHE2_OPTS="${APACHE2_OPTS} -D $1" sed -i -e "s:APACHE2_OPTS=\".*\":APACHE2_OPTS=\"${APACHE2_OPTS}\":" $apache_conffile fi fi } function meta_mail() { local package_list="" local add_maildrop="" local remove_ssmtp="no" local rc_scripts="" local use_courier="no" local use_dovecot="no" local useflags_postfix="mysql" local installed_postfix="no" local installed_amavisd="no" valid_input "Do you want to use dovecot or courier?" "dovecot/courier" if [ "$Return_Val" = "dovecot" ] then use_dovecot="yes" else use_courier="yes" fi echo -e "" printf "\e[1;37m%-40s\e[0m" "Building list of required mail packages" start_spinner if [ "$use_courier" == "yes" ] then is_package_installed "net-libs/courier-authlib" "mysql" || { package_list="$package_list net-libs/courier-authlib"; rc_scripts="$rc_scripts courier-authlib"; } is_package_installed "net-mail/courier-imap" "fam" || { package_list="$package_list net-mail/courier-imap"; rc_scripts="$rc_scripts courier-imapd courier-imapd-ssl courier-pop3d courier-pop3d-ssl"; } is_package_installed "mail-filter/maildrop" || add_maildrop="yes" # Avoid file collision warnings from emerge is_package_installed "dev-libs/cyrus-sasl" "mysql" || { package_list="$package_list dev-libs/cyrus-sasl"; rc_scripts="$rc_scripts saslauthd"; } useflags_postfix="$useflags_postfix sasl" fi if [ "$use_dovecot" == "yes" ] then is_package_installed "net-mail/dovecot" "sieve managesieve maildir" || { package_list="$package_list net-mail/dovecot"; rc_scripts="$rc_scripts dovecot"; } useflags_postfix="$useflags_postfix dovecot-sasl" fi if ! is_package_installed "mail-mta/postfix" "$useflags_postfix" then is_package_installed "mail-mta/ssmtp" && local remove_ssmtp="yes"; # Ssmtp blocks postfix and is installed by default. package_list="$package_list mail-mta/postfix" rc_scripts="$rc_scripts postfix" package_is_emerged "mail-mta/postfix" # USE flag difference will result in re-installing. If we are installing for the first time do some things later. installed=$? if [ $installed -eq 1 ] then installed_postfix="yes" fi fi is_package_installed "net-mail/getmail" || package_list="$package_list net-mail/getmail" if ! is_package_installed "mail-filter/amavisd-new" "mysql razor spamassassin" then package_list="$package_list mail-filter/amavisd-new" rc_scripts="$rc_scripts amavisd" package_is_emerged "mail-filter/amavisd-new" # USE flag difference will result in re-installing. If we are installing for the first time do some things later. installed=$? if [ $installed -eq 1 ] then installed_amavisd="yes" fi fi is_package_installed "app-antivirus/clamav" || { package_list="$package_list app-antivirus/clamav"; rc_scripts="$rc_scripts clamd"; } is_package_installed "dev-perl/Authen-SASL" || package_list="$package_list dev-perl/Authen-SASL" is_package_installed "dev-perl/perl-ldap" || package_list="$package_list dev-perl/perl-ldap" stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" if [ "$remove_ssmtp" == "yes" ] then exec_command "emerge --unmerge mail-mta/ssmtp" "Removing ssmtp to install postfix" fi install_packages "$package_list" "Installing mail packages" if [ -n "$add_maildrop" ] then exec_command "COLLISION_IGNORE=\"/usr\" emerge mail-filter/maildrop" "Installing maildrop" fi if [ "$installed_postfix" == "yes" ] && [ ! -d '/etc/mail/aliases.db' ] then postmap /etc/mail/aliases 2> /dev/null fi if [ "$installed_amavisd" == "yes" ] then if [ -e '/usr/share/spamassassin/sa-update-pubkey.txt' ] then sa-update --import /usr/share/spamassassin/sa-update-pubkey.txt fi sa-update fi install_rcscripts "$rc_scripts" } function meta_web() { local package_list="" local fix_jailkit="no" local linguas_add="no" local webmail_add="no" local rc_scripts="" local installed_fcgid="no" if ! is_package_installed "dev-vcs/subversion" then flagedit dev-vcs/subversion -apache2 --nowarn fi is_package_installed "app-portage/layman" "subversion" || exec_command "emerge app-portage/layman" "Installing layman"; # Check if sunrise overlay has been enabled if [ -z "$(layman -l | grep sunrise)" ] then layman -q -S > /dev/null exec_command "layman -a sunrise" "Adding/syncing package overlay" fi if [ -z "$(grep 'var/lib/layman' /etc/make.conf)" ] then echo "source /var/lib/layman/make.conf" >> /etc/make.conf fi echo -e "" printf "\e[1;37m%-40s\e[0m" "Building list of required web packages" start_spinner # Check profile and ensure the apache modules ISPConfig needs are enabled. source /etc/make.conf if [ -z "${APACHE2_MODULES+xxx}" ] # Not set, fetch defaults then source /usr/portage/profiles/base/make.defaults echo "APACHE2_MODULES=\"$APACHE2_MODULES\"" >> /etc/make.conf source /etc/make.conf fi local added_module='no' for module in rewrite dav dav_fs auth_digest do if [ $(expr "$APACHE2_MODULES" : ".*$module.*") == "0" ] then APACHE2_MODULES="${APACHE2_MODULES} $module" added_module='yes' fi done if [ "$added_module" == "yes" ] then sed -i -e "s:APACHE2_MODULES=\".*\":APACHE2_MODULES=\"${APACHE2_MODULES}\":" /etc/make.conf fi local added_worker='no' if [ -z "${APACHE2_MPMS+xxx}" ] # Not set, fetch defaults then echo 'APACHE2_MPMS="prefork"' >> /etc/make.conf added_worker='yes' else if [ $(expr "$APACHE2_MPMS" : '.*prefork.*') == "0" ] then APACHE2_MPMS="${APACHE2_MPMS} prefork" sed -i -e "s:APACHE2_MPMS=\".*\":APACHE2_MPMS=\"${APACHE2_MPMS}\":" /etc/make.conf added_worker='yes' fi fi if is_package_installed "www-servers/apache" "ssl suexec doc" || "$added_module" == "yes" || "$added_worker" == "yes" then package_list="$package_list www-servers/apache" rc_scripts="$rc_scripts apache2" fi if ! is_package_installed "www-apache/mod_fcgid" then installed_fcgid="yes" package_list="$package_list www-apache/mod_fcgid" fi if ! is_package_installed "app-admin/webalizer" "vhosts apache2" then is_package_installed "media-libs/gd" "jpeg png" || package_list="$package_list media-libs/gd" if package_has_use_flag "app-admin/webalizer" "nls" then source /etc/make.conf if [ -z "${LINGUAS}" ] then linguas_add="yes" fi fi package_list="$package_list app-admin/webalizer" fi is_package_installed "www-misc/awstats" "vhosts apache2" || package_list="$package_list www-misc/awstats" if ! is_package_installed "app-admin/vlogger" "dbi" then # Check if package is masked if [ -n "$(equery -C -N list -I -o -e app-admin/vlogger | grep app-admin/vlogger | awk '{print $2}' | grep '^\[M')" ] then flagedit app-admin/vlogger -- +~amd64 +~x86 > /dev/null fi package_list="$package_list app-admin/vlogger" fi is_package_installed "app-crypt/mcrypt" || package_list="$package_list app-crypt/mcrypt" is_package_installed "dev-lang/php" "apache2 gd mysql mysqli imap cli cgi pcre xml zlib crypt ctype session unicode mhash ftp soap" || package_list="$package_list dev-lang/php" if ! is_package_installed "www-apache/mod_suphp" then # Check if package is masked if [ -n "$(equery -C -N list -I -p -e www-apache/mod_suphp | grep www-apache/mod_suphp | awk '{print $2}' | grep '^\[M')" ] then flagedit www-apache/mod_suphp -- +~amd64 +~x86 > /dev/null fi package_list="$package_list www-apache/mod_suphp" fi is_package_installed "www-apache/mod_ruby" || package_list="$package_list www-apache/mod_ruby" is_package_installed "media-gfx/imagemagick" "jpeg png tiff" || package_list="$package_list media-gfx/imagemagick" is_package_installed "dev-php/PEAR-PEAR" || package_list="$package_list dev-php/PEAR-PEAR" is_package_installed "dev-php/PEAR-Auth" || package_list="$package_list dev-php/PEAR-Auth" is_package_installed "dev-php5/pecl-imagick" || package_list="$package_list dev-php5/pecl-imagick" is_package_installed "sys-auth/pam_mysql" || package_list="$package_list sys-auth/pam_mysql" is_package_installed "app-admin/sudo" || package_list="$package_list app-admin/sudo" is_package_installed "app-arch/zip" || package_list="$package_list app-arch/zip" if ! is_package_installed "app-admin/jailkit" then # Check if package is masked if [ -n "$(equery -C -N list -I -o -e app-admin/jailkit | grep app-admin/jailkit | awk '{print $2}' | grep '^\[M')" ] then flagedit app-admin/jailkit -- +~amd64 +~x86 > /dev/null fi # The ebuild for jailkit 2.3 has a nasty bug that breaks the login shell. Check for version and # apply the fix if necessary. if [ "$(emerge -pv app-admin/jailkit | grep -o -P '(?<=jailkit-)[\d-.rp_]+')" == "2.3" ] then fix_jailkit="yes" cp /etc/shells /etc/shells~ fi package_list="$package_list app-admin/jailkit" fi #if [ "$install_mail" == "yes" ] && ! is_package_installed "mail-client/squirrelmail" "vhosts" #then # if ! is_package_installed "app-admin/webapp-config" # then # package_list="$package_list app-admin/webapp-config" # fi # webmail_add="yes" # package_list="$package_list mail-client/squirrelmail" #fi stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" if [ "$linguas_add" == "yes" ] then echo -e "" echo -e "The nls use flag is enabled for webalizer and no locale preference is set in make.conf. If " echo -e "not set webalizer will fail to install." echo -e "" accept_locales=`find /usr/share/locale/ -maxdepth 1 -type d -exec basename '{}' \; | grep -v "locale" | sort | tr "\n" "/" | sed -e 's,\(.\)/$,\1,'` valid_input "Set locale value for gettext-based programs to: " "$accept_locales" "en" echo "LINGUAS=\"$Return_Val\"" >> /etc/make.conf echo -e "" fi install_packages "$package_list" "Installing web packages" if [ $? -eq 0 ] && [ "$fix_jailkit" == "yes" ] && [ -z "$(grep 'jk_chrootsh' /etc/shells)" ] then cp /etc/shells /etc/shells.jailkit-v2.3 cp /etc/shells~ /etc/shells echo "/usr/sbin/jk_chrootsh" >> /etc/shells fi for config_module in SUEXEC FCGID AUTH_DIGEST DAV DAV_FS RUBY do enable_apache_module "$config_module" done #if [ "$webmail_add" == "yes" ] #then # exec_command "webapp-config -I -h localhost -u apache -d /webmail squirrelmail $(ls -r /usr/share/webapps/squirrelmail/ | awk '{print $1}')" "Adding squirrelmail to localhost" #fi install_rcscripts "$rc_scripts" } function meta_ftp() { local package_list="" local rc_scripts="" echo -e "" printf "\e[1;37m%-40s\e[0m" "Building list of required ftp packages" start_spinner is_package_installed "net-ftp/pure-ftpd" "mysql" || { package_list="$package_list net-ftp/pure-ftpd"; rc_scripts="$rc_scripts pure-ftpd"; } is_package_installed "sys-fs/quota" || package_list="$package_list sys-fs/quota"; if ! is_package_installed "sys-fs/quotatool" then # Check if package is masked if [ -n "$(equery -C -N list -I -p -e sys-fs/quotatool | grep sys-fs/quotatool | awk '{print $2}' | grep '^\[M')" ] then flagedit sys-fs/quotatool -- +~amd64 +~x86 > /dev/null fi package_list="$package_list sys-fs/quotatool" fi stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" if [ $(expr "$package_list" : '.*sys-fs/quota.*') -ne 0 ] then echo -e "" echo -e "\e[1;33mNotice:\e[0m Don't forget to edit your fstab file and add the usrquota & grpquota options to your data partition." echo -e "" sleep 2 fi install_packages "$package_list" "Installing ftp packages" install_rcscripts "$rc_scripts" } function meta_dns() { local package_list="" local use_bind="no" local use_pdns="no" valid_input "Do you want to use bind or powerdns?" "bind/powerdns" if [ "$Return_Val" = "bind" ] then use_bind="yes" else use_pdns="yes" fi echo -e "" printf "\e[1;37m%-40s\e[0m" "Building list of required dns packages" start_spinner if [ "$use_bind" == "yes" ] then is_package_installed "net-dns/bind" "mysql dlz" || { package_list="$package_list net-dns/bind"; rc_scripts="$rc_scripts named"; } fi if [ "$use_pdns" == "yes" ] then is_package_installed "net-dns/pdns" "mysql" || package_list="$package_list net-dns/pdns"; fi stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" install_packages "$package_list" "Installing dns packages" install_rcscripts "$rc_scripts" } function meta_all() { meta_mail meta_web meta_ftp meta_dns } case $1 in "--version"|"-h"|"--help") echo -e "Gentoo Linux ISPConfig setup script" echo -e "Version $version" echo -e "" echo -e "No arguments needed, simply execute the script." exit 0 ;; *) ;; esac clear echo -e "\e[1;33mGentoo Linux ISPConfig setup script v$version\e[0m" echo -e "\e[1;32m========================================\e[0m" echo -e "" if [ -e "/etc/gentoo-release" ] then BASELAYOUT_VERSION=$(cat /etc/gentoo-release | sed "s/[^0-9.]//g") package_is_emerged "sys-apps/baselayout-$BASELAYOUT_VERSION" installed=$? if [ "$installed" != "0" ] then echo -e "" echo "This script is exclusively for use with a Gentoo Linux system." exit 10 fi else echo -e "" echo "This script is exclusively for use with a Gentoo Linux system." exit 10 fi sleep 0.5 valid_input "Would you like to sync portage now?" if [ "$Return_Val" = "yes" ] then exec_command "emerge --sync --quiet" "Updating portage tree" fi # Get all the programs we need to do portage queries etc. echo -en "\e[1;37mChecking for required packages\e[0m\n" # Verify if gentoolkit has been emerged and install if not which equery &> /dev/null if [ $? -ne 0 ] then exec_command "emerge app-portage/gentoolkit" "Installing gentoolkit" fi which flagedit &> /dev/null if [ $? -ne 0 ] then exec_command "emerge app-portage/flagedit" "Installing flagedit" fi if ! is_package_installed "app-admin/rsyslog" then printf "\e[1;37m%-40s\e[0m" "Checking for installed system loggers" start_spinner loggers=( syslog-ng metalog sysklogd ) clogger="" rsyslog_install="yes" for logger in $loggers do if is_package_installed "app-admin/$logger" && [ -n "$(rc-config list default | grep $logger)" ] then clogger=$logger break fi done stop_spinner echo -e "\e[1;37m[ \e[0m\e[1;32mdone\e[0m\e[1;37m ]\e[0m" if [ "$clogger" != "" ] then echo -e "" echo -e "$clogger appears to be installed on your system." echo -e "To use the log monitoring features in ISPConfig" echo -e "the log facilities need to be configured to certain" echo -e "paths. Currently the default rsyslog file is used." echo -e "" valid_input "Would you like to replace $clogger with rsyslog?" if [ "$Return_Val" = "yes" ] then echo -e "" exec_command "/etc/init.d/$clogger stop" "Stopping $clogger" exec_command "rc-update del $clogger default" "Remove $clogger from default runlevel" else rsyslog_install="no" fi fi if [ "$rsyslog_install" == "yes" ] then exec_command "emerge app-admin/rsyslog" "Installing rsyslog" exec_command "/etc/init.d/rsyslog start" "Starting rsyslog" exec_command "rc-update add rsyslog default" "Add rsyslog to default runlevel" fi echo -e "" fi if ! is_package_installed "dev-db/mysql" "extraengine big-tables" then package_is_emerged "dev-db/mysql" installed=$? exec_command "emerge dev-db/mysql" "Installing MySql" if [ $installed -eq 1 ] then echo -e "" echo -e "\e[1;33mNotice:\e[0m Don't forget to set the mysql root password with: /usr/bin/mysqladmin -u root password 'new-password'." echo -e "" fi fi if [ ! -d '/var/lib/mysql/mysql' ] then exec_command "mysql_install_db" "Set-up mysql grant tables" fi install_rcscripts "mysql" mysql_started=`eselect rc show | grep mysql | grep started | grep -v grep` if [ -z "$mysql_started" ] then exec_command "/etc/init.d/mysql start" "Starting MySQL service" fi which vim &> /dev/null if [ $? -ne 0 ] then exec_command "emerge app-editors/vim" "Installing vim" fi is_package_installed "sys-devel/binutils" || exec_command "emerge sys-devel/binutils" "Installing binutils"; is_package_installed "app-forensics/rkhunter" || exec_command "emerge app-forensics/rkhunter" "Installing rkhunter"; is_package_installed "net-analyzer/fail2ban" || exec_command "emerge net-analyzer/fail2ban" "Installing fail2ban"; echo -e "" # Service based packages echo -en "\e[1;37mService based packages\e[0m\n" valid_input "Install all packages or select targeted services?" "all/targeted" if [ "$Return_Val" = "all" ] then install_mail="yes" install_web="yes" install_ftp="yes" install_dns="yes" meta_all else valid_input "Install mail related packages?" install_mail=$Return_Val if [ "$install_mail" = "yes" ] then meta_mail fi echo -e "" echo -e "\e[1;33mNotice:\e[0m If this server is going to run the ISPConfig interface, say 'yes' to web related packages." echo -e "" valid_input "Install web related packages?" install_web=$Return_Val if [ "$install_web" = "yes" ] then meta_web fi echo -e "" valid_input "Install ftp related packages?" install_ftp=$Return_Val if [ "$install_ftp" = "yes" ] then meta_ftp fi echo -e "" valid_input "Install dns related packages?" install_dns=$Return_Val if [ "$install_dns" = "yes" ] then meta_dns fi fi if [ "$install_web" = "no" ] && ! is_package_installed "dev-lang/php" "-apache2 gd mysql mysqli imap cli cgi pcre xml zlib crypt ctype session unicode mhash ftp" then exec_command "emerge dev-lang/php" "Installing PHP" fi echo -e "" echo -e "\e[1;33mSetup script completed\e[0m" echo -e "\e[1;32m========================================\e[0m" echo -e "" valid_input "Do you want to start the ISPConfig installer?" if [ "$Return_Val" = "yes" ] then clear php -q ../install/install.php fi exit $? ispconfig3_install/helper_scripts/debian_setup.sh0000775000000000000000000000146715114346020021403 0ustar rootroot#!/bin/sh apt-get install postfix postfix-mysql postfix-doc mysql-client mysql-server courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl postfix-tls libsasl2-2 libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql openssl courier-maildrop getmail4 apt-get install amavisd-new spamassassin clamav clamav-daemon zoo unzip bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl modprobe capability echo 'capability' >> /etc/modules apt-get install pure-ftpd-common pure-ftpd-mysql quota quotatool echo 'yes' > /etc/pure-ftpd/conf/DontResolve apt-get install mydns-mysql apt-get install vlogger webalizer php -q ../install/install.php ispconfig3_install/helper_scripts/cert_check.sh0000775000000000000000000000362015114346020021024 0ustar rootroot#!/bin/bash chkdata() { F=$1 CRT=$2 KEY=$3 if [[ "$CRT" != "" && "$KEY" != "" ]] ; then if [[ ! -f "$CRT" ]] ; then echo "[WARN] CERTIFICATE FILE ${CRT} MISSING FOR ${F}" ; else echo -n "Checking ${CRT}" ; CHK=$(openssl x509 -in "${CRT}" -text -noout >/dev/null 2>&1 ; echo $?); if [[ $CHK -ne 0 ]] ; then echo " FAILED!" ; else echo " OK" ; fi fi if [[ ! -f "$KEY" ]] ; then echo "[WARN] KEY FILE ${KEY} MISSING FOR ${F}" ; else echo -n "Checking ${KEY}" ; CHK=$(openssl rsa -in "${KEY}" -check -noout >/dev/null 2>&1 ; echo $?); if [[ $CHK -ne 0 ]] ; then echo " FAILED!" ; else echo " OK" ; fi fi if [[ -f "$CRT" && -f "$KEY" ]] ; then echo -n "Checking that key and certificate match"; MDCRT=$(openssl x509 -noout -modulus -in "${CRT}" | openssl md5) ; MDKEY=$(openssl rsa -noout -modulus -in "${KEY}" | openssl md5) ; if [[ "$MDCRT" != "$MDKEY" ]] ; then echo " FAILED!" ; else echo " OK" ; fi fi echo "---" ; elif [[ "$CRT" != "" || "$KEY" != "" ]] ; then echo "[WARN] Check SSL config of ${F}"; echo "---" ; fi } if [[ -d /etc/apache2/sites-enabled ]] ; then echo "Checking enabled apache vhosts" ; for FIL in /etc/apache2/sites-enabled/* ; do CRT=$(grep 'SSLCertificateFile' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ; KEY=$(grep 'SSLCertificateKeyFile' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ; chkdata "$FIL" "$CRT" "$KEY" ; done fi if [[ -d /etc/nginx/sites-enabled ]] ; then echo "Checking enabled nginx vhosts" ; for FIL in /etc/nginx/sites-enabled/* ; do CRT=$(grep 'ssl_certificate' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ; CRT=${CRT%;} KEY=$(grep 'ssl_certificate_key' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ; KEY=${KEY%;} chkdata "$FIL" "$CRT" "$KEY" ; done fiispconfig3_install/helper_scripts/import_langfile.php0000775000000000000000000001401615114346020022263 0ustar rootroot') return $line; // don't treat empty lines as malicious $ok = preg_match('/^\s*\$wb\[(["\'])(.*?)\\1\]\s*=\s*(["\'])(.*?)\\3\s*;\s*$/', $line, $matches); if(!$ok) return false; // this line has invalid form and could lead to malfunction $keyquote = $matches[1]; // ' or " $key = $matches[2]; if(strpos($key, '"') !== false || strpos($key, "'") !== false) return false; $textquote = $matches[3]; // ' or " $text = $matches[4]; $new_line = '$wb[\''; // validate the language key $key = normalize_string($key, $keyquote); $new_line .= $key . '\'] = \''; // validate this text to avoid code injection $text = normalize_string($text, $textquote, true); $new_line .= $text . '\';'; return $new_line; } $lines = file($lang_file); define('ISPC_ROOT_PATH', $ispconfig_path.'/interface'); define('ISPC_LIB_PATH', ISPC_ROOT_PATH.'/lib'); define('ISPC_WEB_PATH', ISPC_ROOT_PATH.'/web'); // initial check $parts = explode('|', $lines[0]); if($parts[0] == '---' && $parts[1] == 'ISPConfig Language File') { unset($lines[0]); $buffer = ''; $langfile_path = ''; // all other lines $ln = 1; foreach($lines as $line) { $ln++; $parts = explode('|', $line); if(is_array($parts) && count($parts) > 0 && $parts[0] == '--') { // Write language file, if its not the first file if($buffer != '' && $langfile_path != '') { $buffer = trim($buffer)."\n"; $msg .= "File written: $langfile_path\n"; file_put_contents($langfile_path, $buffer); } // empty buffer and set variables $buffer = ''; $module_name = trim($parts[1]); $selected_language = trim($parts[2]); $file_name = trim($parts[3]); if(!preg_match("/^[a-z]{2}$/i", $selected_language)) die("unallowed characters in selected language name: $selected_language"); if(!preg_match("/^[a-z_]+$/i", $module_name)) die('unallowed characters in module name.'); if(!preg_match("/^[a-z\._\-]+$/i", $file_name) || stristr($file_name, '..')) die("unallowed characters in language file name: '$file_name'"); if($module_name == 'global') { $langfile_path = trim(ISPC_LIB_PATH."/lang/".$selected_language.".lng"); } else { $langfile_path = trim(ISPC_WEB_PATH.'/'.$module_name.'/lib/lang/'.$file_name); } } elseif(is_array($parts) && count($parts) > 1 && $parts[0] == '---' && $parts[1] == 'EOF') { // EOF line, ignore it. } else { $line = validate_line($line); if($line === false) $error .= "Language file contains invalid language entry on line $ln.\n"; else $buffer .= $line."\n"; } } } echo $error; echo $msg; die("finished import.\n"); ?> ispconfig3_install/helper_scripts/ubuntu-amavisd-new-2.11.patch0000775000000000000000000000136415114346020023534 0ustar rootroot--- amavisd-new.orig 2017-11-16 11:51:19.000000000 +0100 +++ amavisd-new 2018-05-25 16:53:45.623398108 +0200 @@ -22829,6 +22829,7 @@ } # load policy banks from the 'client_ipaddr_policy' lookup Amavis::load_policy_bank($_,$msginfo) for @bank_names_cl; + $msginfo->originating(c('originating')); $msginfo->client_addr($cl_ip); # ADDR $msginfo->client_port($cl_port); # PORT @@ -34361,6 +34362,7 @@ $sig_ind++; } Amavis::load_policy_bank($_,$msginfo) for @bank_names; + $msginfo->originating(c('originating')); $msginfo->dkim_signatures_valid(\@signatures_valid) if @signatures_valid; # if (ll(5) && $sig_ind > 0) { # # show which header fields are covered by which signature ispconfig3_install/helper_scripts/dns_export_to_bind_retrans_daily.php0000775000000000000000000000056115114346020025713 0ustar rootroot ispconfig3_install/helper_scripts/import_dkim.php0000775000000000000000000001302215114346020021422 0ustar rootroot /dev/null', $tmp_output, $tmp_retval); if ($tmp_retval != 0) { exec('which amavisd 2> /dev/null', $tmp_output, $tmp_retval); if ($tmp_retval == 0) $amavis = $tmp_output[0]; } else $amavis = $tmp_output[0]; if (!isset($amavis)) die ("amavisd not found"); echo "Importing dkim-settings from amavis.\n\nTo import the settings even when the public-key is not available, use ".$argv[0]." --force\nNOTE: In force-mode dkim will be set to 'no' if no public-key was found.\n\n"; if ( isset($argv) && isset ($argv[1]) && $argv[1] == '--force' ) $force = true; else $force = false; $client = new SoapClient(null, array('location' => $soap_location, 'uri' => $soap_uri, 'trace' => 1, 'exceptions' => 1)); exec($amavis.' showkeys', $tmp_output, $tmp_retval); foreach ( $tmp_output as $line ) { //* get domain and private key-file if ( preg_match('#^; key#', $line) ) { $line_array = explode(' ', $line); if ( $line_array[2] = 'domain' ) { $domain = rtrim($line_array[3], ','); $private_keyfile = $line_array[4]; //* get the public-key from private-key unset($public_key); unset($pubkey); unset($private_key); $private_key = file_get_contents($private_keyfile); if ( isset($private_key) && !empty($private_key)) { exec('echo '.escapeshellarg($private_key).'|openssl rsa -pubout -outform PEM 2> /dev/null',$pubkey,$result); $public_key=''; foreach($pubkey as $values) $public_key=$public_key.$values."\n"; } } } //* get selector if ( isset($domain) ) { if ( preg_match('/_domainkey.'.$domain.'.* TXT \(/', $line) ) { $line_array = explode(' ', $line); $selector = substr ( $line_array[0], 0, strpos($line_array[0], '.') ); } } if ( isset($domain) && isset($selector) && isset($private_keyfile) && isset($public_key) ) { try { if ( !$session_id = $client->login($username, $password) ) { echo 'SOAP-ERROR: Cant login'; } echo "\nprocessing ".$domain."...\n"; $record = $client->mail_domain_get_by_domain($session_id, $domain); if ( !empty($record) ) { $record = $record[0]; echo " OK: domain exists in the database\n"; //* check if the public-key is available exec($amavis.' testkeys '.escapeshellarg($domain).'', $test_output, $test_retval); $pub_key = false; if ( preg_match('/^TESTING.*'.$selector.'._domainkey.'.$domain.'.*pass/',$test_output[0]) ) $pub_key = true; $client_id = $client->client_get_id($session_id, $record['sys_userid']); unset($test_output); if ( $pub_key ) { $record['dkim_selector'] = $selector; $record['dkim'] = 'y'; if ( preg_match("/(^-----BEGIN PUBLIC KEY-----)[a-zA-Z0-9\r\n\/\+=]{1,221}(-----END PUBLIC KEY-----(\n|\r)?$)/", $record['dkim_public'] ) ) { $record['dkim_public'] = $public_key; echo " OK: public key\n"; } else { $record['dkim_public'] = ''; $record['dkim'] = 'n'; echo " ERROR: public key invalid\n disable dkim for ".$domain."\n"; } if ( preg_match("/(^-----BEGIN RSA PRIVATE KEY-----)[a-zA-Z0-9\r\n\/\+=]{1,850}(-----END RSA PRIVATE KEY-----(\n|\r)?$)/", $private_key) ) { $record['dkim_private'] = $private_key; echo " OK: private key\n"; } else { $record['dkim_private'] = ''; $record['dkim'] = 'n'; echo " ERROR: private key invalid\n disable dkim for ".$domain."\n"; } $client->mail_domain_update($session_id, $client_id, $record['domain_id'], $record); echo " OK: updating database\n"; } else { echo " ERROR: no public-key available - skipping ".$domain."\n"; } } else { echo " ERROR: domain not in the database - skipping ".$domain."\n"; } $client->logout($session_id); } catch (SoapFault $e) { echo $client->__getLastResponse(); die('SOAP Error: '.$e->getMessage()); } unset($domain); unset($selector); } } ?> ispconfig3_install/helper_scripts/fixcerts0000775000000000000000000001555215114346020020157 0ustar rootroot #!/bin/bash ##################################################################################### # # # Syntax: fixcerts DOMAIN # # # # Use: Extend Letsencrypt SSl certificates for commonly grouped services such as # # Apache,Postfix,Dovecot using Certbot. Useful for keeping all client # # applications referencing the same virtual domain name, such as auto-config # # email clients on phones, i.e. mailuser@mydomain.TLD smtp.mydomain.TLD # # imaps.mydomain.TLD instead of mailuser@mydomain.TLD mail.ISPmaildomain.TLD # # Also useful when sending mail through services like Gmail that will # # validate sender through a negotiated TLS encrypted connection. # # # # Ex: sh fixcerts myhosteddomain.com # # # # Prerequisites: # # - A Letsencrypt certificate for the DOMAIN must already exist # # - A seperate certificate each for Dovecot and Postfix were previously generated # # - All new host names to add MUST already exist in DNS at least as a CNAME # # - Edit the Dovecot/Postfix conf to use the alternate certificate # # - Set the variable wr_file to a directory that certbot can read and write from # # - Set the dom_cert=,dv_cert=,pf_cert=,dv_file=, and pf_file= variables # # # # In my case, I ran: # # certbot certonly -webroot /usr/local/ispconfig/interface/acme -d dc.hrst.xyz # # certbot certonly -webroot /usr/local/ispconfig/interface/acme -d pf.hrst.xyz # # to create the separate Dovecot and Postscript certificates, then edited and # # ran the script to extend those certificate, once per hosted domain # # # # If you use only one alternate certifcate for both mail services, set both dv_file # # and pf_file to the same file name and set one of _cert files="" and # # use the other. If you don't wish to add to a particular certificate, set the # # variable ="", such as dom_cert # # TODO: Pre-validate desired additions as already existing in DNS # # Generate SRV Records and add to DNS to autoconfig clients # # # # Author: tad.hasse@gmail.com # # # ##################################################################################### #bail out on error set -e # Hostnames to add to the main domain certificate dom_cert="webmail" # Hostnames to add to the Dovecot domain certificate dv_cert="pop3s imap" # Hostnames to add to the Postfix domain certificate pf_cert="mail smtp smtps" # Name of the certificate file that handles Dovecot dv_file="dc.hrst.xyz" # Name of the certificate file that handles Postfix pf_file="pf.hrst.xyz" # Writeable webroot for certbot (I use ISPConfig, wr_file="/usr/local/ispconfig/interface/acme" new_cert="" nanobot="" affected_services="" if [ -z "$1" ] # Is parameter #1 zero length? then echo "-No DOMAIN specified" # Or no parameter passed. exit 1 fi #live_check='/etc/letsencrypt/live/'$1 if [[ ! -d '/etc/letsencrypt/live/'$1 ]]; then echo "- DOMAIN certificate for \"$1\" not found -" exit 1 fi if [[ ! -d '/etc/letsencrypt/live/'${dv_file} ]]; then echo "- Dovecot/postoffice certificate" ${dv_file}" for \"$1\" not found -" exit 1 fi if [[ ! -d '/etc/letsencrypt/live/'${pf_file} ]]; then echo "- Postfix/mail certificate" ${pf_file}" for \"$1\" not found -" exit 1 fi # Have certbot generate its current certificate list for use as input certbot certificates >~/certfile # Extend base domain certificate which typically only contains the domain.TLD and www.domain.TLD if [[ ! -z "${dom_cert}" ]]; then echo new_cert=$(echo $dom_cert| sed -e "s/ /.$1 /g" -e 's/ / -d /g' -e "s/$/.$1 /g" -e 's/^/-d /g') echo "Adding" ${new_cert} " to "$1 nanobot=$(grep -A1 "Certificate Name: "$1 certfile |awk -F': ' '{ {getline}; $1=""; print }'|sed 's/ / -d /g') doit_cert=$(echo "certbot certonly --webroot -w ${wr_file}${nanobot} ${new_cert}") ${doit_cert} affected_services=${affected_services}+"A" else echo "Domain Certificate unaffected" fi # Extend the Dovecot certificate if [[ ! -z "${dv_cert}" ]]; then echo new_cert=$(echo $dv_cert| sed -e "s/ /.$1 /g" -e 's/ / -d /g' -e "s/$/.$1 /g" -e 's/^/-d /g') echo "Adding" ${new_cert} " to "${dv_file} nanobot=$(grep -A1 "Certificate Name: "${dv_file} certfile |awk -F': ' '{ {getline}; $1=""; print }'|sed 's/ / -d /g') doit_cert=$(echo "certbot certonly --webroot -w ${wr_file}${nanobot} ${new_cert}") ${doit_cert} affected_services=${affected_services}+"D" else echo "Dovecot Certificate unaffected" fi # Extend the Postscript certificate if [[ ! -z "{$pf_cert}" ]]; then echo new_cert=$(echo $pf_cert| sed -e "s/ /.$1 /g" -e 's/ / -d /g' -e "s/$/.$1 /g" -e 's/^/-d /g') echo "Adding" ${new_cert} " to " ${pf_file} nanobot=$(grep -A1 "Certificate Name: "${pf_file} certfile |awk -F': ' '{ {getline}; $1=""; print }'|sed 's/ / -d /g') doit_cert=$(echo "certbot certonly --webroot -w ${wr_file}${nanobot} ${new_cert}") ${doit_cert} affected_services=${affected_services}+"P" else echo "Postfix Certificate unaffected" fi if [[ $affected_services == *"A"* ]]; then echo "Remember to restart the httpd service" fi if [[ $affected_services == *"D"* ]]; then echo "Remember to restart the dovecot/postoffice service" fi if [[ $affected_services == *"P"* ]]; then echo "Remember to restart the postfix/sendmail service" fi echo echo echo "Add the following SRV records to DNS for client setup for "$1 if [[ $affected_services == *"D"* ]]; then echo "_imaps._tcp."$1 "SRV 3600 4 60 993 imaps" echo "_pop3s._tcp."$1 "SRV 3600 6 60 995 pop3s" echo "_imap._tcp."$1 " SRV 3600 8 60 143 imap" fi if [[ $affected_services == *"P"* ]]; then echo "_smtps._tcp."$1 "SRV 3600 8 60 465 smtps" echo "_smtp._tcp."$1 " SRV 3600 10 60 587 smtp" fiispconfig3_install/helper_scripts/multifile_add0000775000000000000000000000223115152616670021135 0ustar rootroot#!/bin/bash # Adding a new translation string to the files for all languages. # If you already added the string to your current language, be sure to deduplicate. new=$(cat << 'EOD' $wb['foo_txt'] = 'Some translation'; EOD ) if [ -z "$1" ]; then echo "Usage: $0 [seek_pattern] " echo echo "Add a hard coded set of new lines to a number of language files." echo "When the first argument is not a file it's treated as a string to search for, adding the new lines directly below it. This only supports adding a single new line though." exit 1 fi if [ ! -f "$1" ]; then seek_pattern=$1; shift; fi for f in $*; do if [ "$(grep --fixed-strings "$new" $f)" ]; then echo "Skipping file[$f] already matches" continue fi if [ -n "$seek_pattern" ]; then # Add inplace, only a single line is supported. sed -i "/$seek_pattern/a\ $new" $f else # Add at the end # Preserve a php close tag as the last line. close='?>' if [ "$(tail -n 1 $f)" == "$close" ]; then ( head -n -1 $f; echo "$new"; echo "?>"; ) > ${f}.new mv ${f}.new $f else echo "$new" >> $f fi fi done ispconfig3_install/helper_scripts/import_dkim.txt0000775000000000000000000000054515114346020021460 0ustar rootrootThis scripts stores all dkim-keys from the amavis-config to the ispconfig-database Create a remote-user with at least rights for mail_domain and clients and adjust the settings for $username = 'admin'; $password = 'admin'; $soap_location = 'http://192.168.0.105:8080/remote/index.php'; $soap_uri = 'http://192.168.0.105:8080/remote/'; in import_dkim.php ispconfig3_install/helper_scripts/utils.sh0000775000000000000000000000673115114346020020100 0ustar rootroot#!/bin/bash # Copyright (c) 2009, Scott Barr # All rights reserved. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions are met: # * Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # * Redistributions in binary form must reproduce the above copyright # notice, this list of conditions and the following disclaimer in the # documentation and/or other materials provided with the distribution. # * Neither the name of the nor the # names of its contributors may be used to endorse or promote products # derived from this software without specific prior written permission. # # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ''AS IS'' # AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE # DISCLAIMED. IN NO EVENT SHALL BE LIABLE FOR ANY # DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES # (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; # LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND # ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS # SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. function countdown { local OLD_IFS="${IFS}" IFS=":" local ARR=( $1 ) ; shift IFS="${OLD_IFS}" local PREFIX="$*" ; [ -n "${PREFIX}" ] && PREFIX="${PREFIX}" local SECONDS=$(( (ARR[0] * 60 * 60) + (ARR[1] * 60) + ARR[2] )) local START=$(date +%s) local END=$((START + SECONDS)) local CUR=$START while [[ $CUR -lt $END ]] do CUR=$(date +%s) LEFT=$((END-CUR)) printf "\r${PREFIX} %02d" \ $((LEFT%60)) sleep 1 done echo " " } function outputVar() { y=\$"$1" x=`eval "expr \"$y\" "` eval "$1=\"$2\"" } function valid_input() { local correct="no" Return_Val="" if [ -z "$2" ] then local opts=( yes no ) local opt_list="yes/no" else local opts=( `echo $2 | tr "/" " "` ) local opt_list=$2 fi while [ "$correct" != "yes" ] do if [ -n "$3" ] then line_prompt="$1 [default: $3] " else line_prompt="$1 [$opt_list] " fi echo -en "$line_prompt" read answer if [ -n "$3" ] then answer=$3 else ret=`echo "${opts[@]}" | grep -w "$answer"` fi if [ $? -eq 0 ] then correct="yes" Return_Val=$answer fi done } function start_spinner() { parent_pid=$$ (SP_STRING="/-\\|"; while [ -d /proc/$1 ] && [ -d /proc/$parent_pid ]; do printf "\e[1;37m\e7[ %1.1s ] \e8\e[0m" "$SP_STRING"; sleep .2; SP_STRING=${SP_STRING#"${SP_STRING%?}"}${SP_STRING%?}; done) & disown spinner_pid=$! } function stop_spinner() { if [ $spinner_pid -gt 0 ] then kill -HUP $spinner_pid 2>/dev/null fi } function exec_command() { printf "%-40s" "$2" (eval $1 >/dev/null 2>&1) & pid=$! start_spinner wait $pid status=$? stop_spinner if [ $status -eq 0 ]; then echo -e "\e[1;37m[ \e[0m\e[1;32mok\e[0m\e[1;37m ]\e[0m" else echo -e "\e[1;37m[ \e[0m\e[1;31mfailed\e[0m\e[1;37m ]\e[0m" echo -e "The following command did not complete successfully:" echo -e "$1" exit 1 fi } ispconfig3_install/helper_scripts/setup_in_openvz/0000775000000000000000000000000015114346020021621 5ustar rootrootispconfig3_install/helper_scripts/setup_in_openvz/recreate_ssh_and_hostname.sh0000775000000000000000000000102515114346020027345 0ustar rootroot#!/bin/bash set -x echo "" > /etc/resolv.conf echo "" > /etc/hostname echo "" > /etc/mailname rm -f /etc/ssh/ssh_host_* cat << EOF > /etc/rc2.d/S15ssh_gen_host_keys #!/bin/bash ssh-keygen -f /etc/ssh/ssh_host_rsa_key -t rsa -N '' ssh-keygen -f /etc/ssh/ssh_host_dsa_key -t dsa -N '' dpkg-reconfigure -u webalizer postconf -e "myhostname = $(hostname -f)" postconf -e "mydestination = $(hostname -f), localhost" echo $(hostname -f) > /etc/mailname dpkg-reconfigure -u postfix rm -f \$0 EOF chmod a+x /etc/rc2.d/S15ssh_gen_host_keys ispconfig3_install/helper_scripts/setup_in_openvz/install_server.sh0000775000000000000000000000377215114346020025225 0ustar rootroot#!/bin/bash # Script to configuring an ispconfig3 server in a Debian VPS # by calocen [at] gmail [dot] com # getting some enviromment values myhostname=`hostname -f` mydomain=`hostname -d` myip=`hostname -i` [ ! -x /usr/bin/geoiplookup ] && apt-get --assume-yes install geoip-bin mycountry=`geoiplookup $myip | cut -f4 -d" " | cut -f1 -d","` myprovince=`geoiplookup $myip | cut -f5 -d" "` # reconfiguring webalizer, postfix # could be cool to modify here webalizer values dpkg-reconfigure -u webalizer postconf -e "myhostname = $myhostname" postconf -e "mydestination = $myhostname, localhost" echo $myhostname > /etc/mailname dpkg-reconfigure -u postfix # request new password oldpwd=`grep password /root/.my.cnf | tr "\t" " " | tr -s " " | cut -f3 -d" "` read -p "mysql password: [$oldpwd] " mysqlpwd [ -z $mysqlpwd ] && mysqlpwd=$oldpwd echo $mysqlpwd #read -p "Are you sure? (y/n) " sure ## who said fear ## set -x mysqladmin -u root -p$oldpwd password $mysqlpwd mysqladmin -u root -p$mysqlpwd -h localhost password $mysqlpwd cat << EOF > /root/.my.cnf [client] password = $mysqlpwd EOF chmod 600 /root/.my.cnf # changing mydns password mysql -e "SET PASSWORD FOR 'mydns'@'%' = PASSWORD( '$mysqlpwd' )" mysql -e "SET PASSWORD FOR 'mydns'@'localhost' = PASSWORD( '$mysqlpwd' )" cp -ax /etc/mydns.conf /etc/mydns.conf~ sed s/$oldpwd/$mysqlpwd/g < /etc/mydns.conf~ > /etc/mydns.conf # enabling mydns mydns --create-tables > /tmp/mydns.sql mysql -e "CREATE DATABASE IF NOT EXISTS mydns ; USE mydns ; SOURCE /tmp/mydns.sql;" rm /tmp/mydns.* invoke-rc.d mydns restart # preparing server installation mv /etc/ssl/openssl.cnf /etc/ssl/openssl.cnf~ sed s/"YOURHOSTNAME"/"$myhostname"/g < /usr/local/bin/openssl.cnf | sed s/"YOURDOMAIN"/"$mydomain"/g | \ sed s/"YOURCOUNTRY"/"$mycountry"/g | \ sed s/"YOURPROVINCE"/"$myprovince"/g > /etc/ssl/openssl.cnf tar xfz /root/downloads/ISPConfig-3.0.0.7-beta.tar.gz -C /usr/local/src # here would be some stuff to update from SVN cd /usr/local/src/ispconfig3_install/install/ php -q install.php ispconfig3_install/helper_scripts/setup_in_openvz/diff_openssl.cnf0000775000000000000000000000116415114346020024771 0ustar rootroot# diff openssl.cnf /usr/lib/ssl/openssl.cnf 68c68 < default_days = 3653 # how long to certify for --- > default_days = 365 # how long to certify for 125c125 < countryName_default = YOURCOUNTRY --- > countryName_default = AU 130c130 < stateOrProvinceName_default = YOURPROVINCE --- > stateOrProvinceName_default = Some-State 135c135 < 0.organizationName_default = YOURDOMAIN --- > 0.organizationName_default = Internet Widgits Pty Ltd 142c142 < organizationalUnitName_default = ISP --- > #organizationalUnitName_default = 145d144 < commonName_default = YOURHOSTNAME 149d147 < emailAddress_default = postmaster@YOURDOMAIN ispconfig3_install/helper_scripts/pdns-slave-zone-cleanup.sh0000775000000000000000000000315615114346020023410 0ustar rootroot#!/bin/bash #### Config ################################ DBHOST="localhost" DBUSER="powerdns" DBPASS="password" DATABASE="powerdns" DEBUG="no" #### End of Config ######################### REQUIRED_COMMANDS=" mysql host grep awk tail " # print debug messages to STDERR function debug { if [ "${DEBUG}" == "yes" ] ; then echo "DEBUG: $@" >&2 fi } for CMD in ${REQUIRED_COMMANDS} ; do CMDNAME=`echo ${CMD} | awk '{print toupper($1) }' | sed -e s@"-"@""@g` export $(eval "echo ${CMDNAME}")=`which ${CMD} 2>/dev/null` if [ -z "${!CMDNAME}" ] ; then debug "Command: ${CMD} not found!" exit 1 else debug "Found command $(echo $CMDNAME) in ${!CMDNAME}" fi done MYSQLCMD="${MYSQL} -h ${DBHOST} -u ${DBUSER} -p${DBPASS} --skip-column-name --silent -e" check() { AUTH=`${HOST} -t SOA ${2} ${1} | ${TAIL} -n1 | ${GREP} "has no SOA record"` if [ "${AUTH}" == "${2} has no SOA record" ]; then debug "Server ${1} has no SOA for ${2} - removing zone..." DOMAIN_ID=`${MYSQLCMD} "USE ${DATABASE}; SELECT id FROM domains WHERE name='${2}' AND type='SLAVE' AND master='${1}' LIMIT 1;"` ${MYSQLCMD} "USE ${DATABASE}; DELETE FROM records WHERE domain_id='${DOMAIN_ID}';" ${MYSQLCMD} "USE ${DATABASE}; DELETE FROM domains WHERE id='${DOMAIN_ID}';" fi } MASTERS=(`${MYSQLCMD} "USE ${DATABASE}; SELECT DISTINCT ip FROM supermasters;"`) for m in "${MASTERS[@]}"; do NAMES=(`${MYSQLCMD} "USE ${DATABASE}; SELECT name FROM domains WHERE type = 'SLAVE' AND master = '${m}';"`) for d in "${NAMES[@]}"; do check ${m} ${d} done done ispconfig3_install/helper_scripts/dns_export_to_bind.php0000775000000000000000000001014215152616670023004 0ustar rootroot0) { $arr3[$xx1]=$arr2[$xx1].$row2['2']." ".$row2['3']."\n"; } else { $arr3[$xx1]=$arr2[$xx1].$row2['3']."\n"; } $xx1=$xx1+1; } $f = fopen("/var/cache/bind/$varx11", "a+"); foreach($arr3 as $values) fputs($f, $values); fclose($f); $arr2=array(); $arr3=array(); //## ENDE Primärer Nameserver TEIL 2 ##################################################################################################### //## Hier ALLES Aktivieren bei Secondary Nameserver ###################################################################################### // $tmp1 = substr($row["ns"],0,-1); // $tmp2 = substr($row["origin"],0,-1); // if (!isset($dnscache[$tmp1])) $nsip = hostname2ipfunktion($tmp1) ; // else $nsip=$dnscache[$tmp1] ; // if ($nsip == $tmp1) // { // echo "$tmp2 $tmp1 Not a valid Nameserver"; // echo "\n"; // } // else // { // $dnscache[$tmp1]=$nsip; // $arr1[$x11]="zone \"".$tmp2."\" in { type slave; file \"".$tmp2."\"; masters {".$nsip."; }; };\n"; // $x11=$x11+1; // } //## ENDE Secondary Nameserver ########################################################################################################### } unlink("/etc/bind/named.conf.local"); $fx = fopen("/etc/bind/named.conf.local", "a+"); foreach($arr1 as $values) fputs($fx, $values); fclose($fx); system("rndc reconfig >/dev/null 2>&1"); //## ANFANG Primärer Namerserver TEIL 2 ################################################################################################## $serialsearch=date("Ymd"); $resultx13 = mysql_query("SELECT origin,serial FROM dns_soa WHERE serial LIKE '$serialsearch%' ORDER BY origin ASC;"); while ($rowx13=mysql_fetch_array($resultx13)) { $serial_ist=($rowx13["serial"]); $zone=substr($rowx13["origin"], 0, -1); // echo "zone: ".$zone." ist: ".$serial_ist." vergleich: ".$serialvergleich[$zone]."\n"; if ($serialvergleich[$zone] != $serial_ist) { $reload=system("rndc reload $zone >/dev/null 2>&1"); } } //## ENDE Primärer NamerserverTEIL 2 ###################################################################################################### ?> ispconfig3_install/helper_scripts/recreate_webalizer_stats.php0000775000000000000000000000266415114346020024172 0ustar rootrootdb->queryAllRecords($sql, $conf["server_id"]); foreach($records as $rec) { $domain = escapeshellcmd($rec["domain"]); $logdir = escapeshellcmd($rec["document_root"].'/log'); $statsdir = escapeshellcmd($rec["document_root"].'/web/stats'); $webalizer = '/usr/bin/webalizer'; $webalizer_conf_main = '/etc/webalizer/webalizer.conf'; $webalizer_conf = escapeshellcmd($rec["document_root"].'/log/webalizer.conf'); exec("rm -rf $webalizer_conf"); if(!@is_file($webalizer_conf)) { exec("cp $webalizer_conf_main $webalizer_conf"); setConfigVar($webalizer_conf, 'Incremental', 'yes'); setConfigVar($webalizer_conf, 'IncrementalName', $logdir.'/webalizer.current'); setConfigVar($webalizer_conf, 'HistoryName', $logdir.'/webalizer.hist'); } if(!@is_dir($statsdir)) mkdir($statsdir); echo "Remove stats dir $statsdir ...\n"; exec("rm -rf $statsdir/*"); echo "Re-Create stats for $domain...\n"; exec("for logfile in $logdir/*access*; do\n$webalizer -c $webalizer_conf -n $domain -s $domain -r $domain -q -T -p -o $statsdir ".'$logfile'."\ndone"); echo "done.\n"; } die("finished.\n"); ?> ispconfig3_install/helper_scripts/mydns_to_powerdns_migration.php0000775000000000000000000000646415114346020024746 0ustar rootroot ispconfig3_install/install/0000775000000000000000000000000015273367323015031 5ustar rootrootispconfig3_install/install/sql/0000775000000000000000000000000015274161566015632 5ustar rootrootispconfig3_install/install/sql/incremental/0000775000000000000000000000000015273367323020131 5ustar rootrootispconfig3_install/install/sql/incremental/upd_0009.sql0000775000000000000000000000546315114346020022106 0ustar rootrootCREATE TABLE IF NOT EXISTS `proxy_reverse` ( `rewrite_id` int(11) NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `rewrite_url_src` varchar(100) NOT NULL, `rewrite_url_dst` varchar(100) NOT NULL, `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`rewrite_id`) ) AUTO_INCREMENT=5 DEFAULT CHARSET=utf8; CREATE TABLE IF NOT EXISTS `firewall_filter` ( `firewall_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `domain_id` int(11) NOT NULL, `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `rule_name` varchar(100) default NULL, `rule_id` int(11) default 1, `src_ip` varchar(20) NOT NULL, `src_netmask` varchar(20) NOT NULL, `dst_ip` varchar(20) NOT NULL, `dst_netmask` varchar(20) NOT NULL, `src_from_port` varchar(10) NOT NULL, `src_to_port` varchar(10) NOT NULL, `dst_to_port` varchar(10) NOT NULL, `dst_from_port` varchar(10) NOT NULL, `protocol` varchar(10) default 'tcp', `inbound_policy` enum('allow','deny','reject','limit') default 'allow', `outbound_policy` enum('allow','deny','reject','limit') default 'allow', `active` enum('n','y') NOT NULL default 'y', `client_id` int(11) NOT NULL, PRIMARY KEY (`firewall_id`) ) AUTO_INCREMENT=12 DEFAULT CHARSET=utf8; CREATE TABLE IF NOT EXISTS `firewall_forward` ( `firewall_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `domain_id` int(11) NOT NULL, `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `application_name` varchar(100) default NULL, `dst_ip` varchar(20) NOT NULL, `src_from_port` varchar(10) NOT NULL, `src_to_port` varchar(10) NOT NULL, `dst_to_port` varchar(10) NOT NULL, `dst_from_port` varchar(10) NOT NULL, `protocol` int(3) default 0, `active` enum('n','y') NOT NULL default 'y', `client_id` int(11) NOT NULL, PRIMARY KEY (`firewall_id`) ) AUTO_INCREMENT=12 DEFAULT CHARSET=utf8; alter table `server` add column `proxy_server` tinyint(1) not null after `vserver_server`; alter table `server` add column `firewall_server` tinyint(1) not null after `proxy_server`; alter table `web_domain` add column `nginx_directives` mediumtext null after `apache_directives`; ispconfig3_install/install/sql/incremental/upd_0003.sql0000775000000000000000000000020515114346020022065 0ustar rootrootALTER TABLE `client` ADD `customer_no` VARCHAR( 64 ) NULL AFTER `contact_name` , ADD `vat_id` VARCHAR( 64 ) NULL AFTER `customer_no`;ispconfig3_install/install/sql/incremental/upd_0095.sql0000775000000000000000000000013415114346020022101 0ustar rootrootALTER TABLE `remote_session` ADD `remote_ip` VARCHAR(39) NOT NULL DEFAULT '' AFTER `tstamp`;ispconfig3_install/install/sql/incremental/upd_0014.sql0000775000000000000000000000020015114346020022062 0ustar rootroot-- database patch for getmail read_all option ALTER TABLE `mail_get` ADD ( `source_read_all` varchar(255) NOT NULL default 'y');ispconfig3_install/install/sql/incremental/upd_0017.sql0000775000000000000000000000031515114346020022074 0ustar rootrootALTER TABLE `client_template` ADD `limit_openvz_vm` int(11) NOT NULL DEFAULT '0' AFTER `limit_mailmailinglist` , ADD `limit_openvz_vm_template_id` int(11) NOT NULL DEFAULT '0' AFTER `limit_openvz_vm`;ispconfig3_install/install/sql/incremental/upd_0021.sql0000775000000000000000000000016115114346020022066 0ustar rootrootALTER TABLE `web_domain` ADD `php_fpm_use_socket` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `nginx_directives`;ispconfig3_install/install/sql/incremental/upd_0012.sql0000775000000000000000000001565015114346020022077 0ustar rootroot-- -- Table structure for table `openvz_ip` -- CREATE TABLE IF NOT EXISTS `openvz_ip` ( `ip_address_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `ip_address` varchar(15) DEFAULT NULL, `vm_id` int(11) NOT NULL DEFAULT '0', `reserved` varchar(255) NOT NULL DEFAULT 'n', PRIMARY KEY (`ip_address_id`) ) DEFAULT CHARSET=utf8 ; -- -- Dumping data for table `openvz_ip` -- -- -------------------------------------------------------- -- -- Table structure for table `openvz_ostemplate` -- CREATE TABLE IF NOT EXISTS `openvz_ostemplate` ( `ostemplate_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `template_file` varchar(255) NOT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `allservers` varchar(255) NOT NULL DEFAULT 'y', `active` varchar(255) NOT NULL DEFAULT 'y', `description` text, PRIMARY KEY (`ostemplate_id`) ) DEFAULT CHARSET=utf8 ; -- -- Dumping data for table `openvz_ostemplate` -- INSERT INTO `openvz_ostemplate` (`ostemplate_id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `template_name`, `template_file`, `server_id`, `allservers`, `active`, `description`) VALUES(1, 1, 1, 'riud', 'riud', '', 'Debian minimal', 'debian-minimal-x86', 1, 'y', 'y', 'Debain minmal image.'); -- -------------------------------------------------------- -- -- Table structure for table `openvz_template` -- CREATE TABLE IF NOT EXISTS `openvz_template` ( `template_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `diskspace` int(11) NOT NULL DEFAULT '0', `traffic` int(11) NOT NULL DEFAULT '-1', `bandwidth` int(11) NOT NULL DEFAULT '-1', `ram` int(11) NOT NULL DEFAULT '0', `ram_burst` int(11) NOT NULL DEFAULT '0', `cpu_units` int(11) NOT NULL DEFAULT '1000', `cpu_num` int(11) NOT NULL DEFAULT '4', `cpu_limit` int(11) NOT NULL DEFAULT '400', `io_priority` int(11) NOT NULL DEFAULT '4', `active` varchar(255) NOT NULL DEFAULT 'y', `description` text, `numproc` varchar(255) DEFAULT NULL, `numtcpsock` varchar(255) DEFAULT NULL, `numothersock` varchar(255) DEFAULT NULL, `vmguarpages` varchar(255) DEFAULT NULL, `kmemsize` varchar(255) DEFAULT NULL, `tcpsndbuf` varchar(255) DEFAULT NULL, `tcprcvbuf` varchar(255) DEFAULT NULL, `othersockbuf` varchar(255) DEFAULT NULL, `dgramrcvbuf` varchar(255) DEFAULT NULL, `oomguarpages` varchar(255) DEFAULT NULL, `privvmpages` varchar(255) DEFAULT NULL, `lockedpages` varchar(255) DEFAULT NULL, `shmpages` varchar(255) DEFAULT NULL, `physpages` varchar(255) DEFAULT NULL, `numfile` varchar(255) DEFAULT NULL, `avnumproc` varchar(255) DEFAULT NULL, `numflock` varchar(255) DEFAULT NULL, `numpty` varchar(255) DEFAULT NULL, `numsiginfo` varchar(255) DEFAULT NULL, `dcachesize` varchar(255) DEFAULT NULL, `numiptent` varchar(255) DEFAULT NULL, `swappages` varchar(255) DEFAULT NULL, `hostname` varchar(255) DEFAULT NULL, `nameserver` varchar(255) DEFAULT NULL, `create_dns` varchar(1) NOT NULL DEFAULT 'n', `capability` varchar(255) DEFAULT NULL, PRIMARY KEY (`template_id`) ) DEFAULT CHARSET=utf8 ; -- -- Dumping data for table `openvz_template` -- INSERT INTO `openvz_template` (`template_id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `template_name`, `diskspace`, `traffic`, `bandwidth`, `ram`, `ram_burst`, `cpu_units`, `cpu_num`, `cpu_limit`, `io_priority`, `active`, `description`, `numproc`, `numtcpsock`, `numothersock`, `vmguarpages`, `kmemsize`, `tcpsndbuf`, `tcprcvbuf`, `othersockbuf`, `dgramrcvbuf`, `oomguarpages`, `privvmpages`, `lockedpages`, `shmpages`, `physpages`, `numfile`, `avnumproc`, `numflock`, `numpty`, `numsiginfo`, `dcachesize`, `numiptent`, `swappages`, `hostname`, `nameserver`, `create_dns`, `capability`) VALUES(1, 1, 1, 'riud', 'riud', '', 'small', 10, -1, -1, 256, 512, 1000, 4, 400, 4, 'y', '', '999999:999999', '7999992:7999992', '7999992:7999992', '65536:65536', '2147483646:2147483646', '214748160:396774400', '214748160:396774400', '214748160:396774400', '214748160:396774400', '65536:65536', '131072:131072', '999999:999999', '65536:65536', '0:2147483647', '23999976:23999976', '180:180', '999999:999999', '500000:500000', '999999:999999', '2147483646:2147483646', '999999:999999', '256000:256000', 'v{VEID}.test.tld', '8.8.8.8 8.8.4.4', 'n', ''); -- -------------------------------------------------------- -- -- Table structure for table `openvz_traffic` -- CREATE TABLE IF NOT EXISTS `openvz_traffic` ( `veid` int(11) NOT NULL, `traffic_date` date NOT NULL, `traffic_bytes` bigint(32) unsigned NOT NULL DEFAULT '0', PRIMARY KEY (`veid`,`traffic_date`) ) DEFAULT CHARSET=utf8; -- -- Dumping data for table `openvz_traffic` -- -- -------------------------------------------------------- -- -- Table structure for table `openvz_vm` -- CREATE TABLE IF NOT EXISTS `openvz_vm` ( `vm_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `veid` int(10) unsigned NOT NULL, `ostemplate_id` int(11) NOT NULL DEFAULT '0', `template_id` int(11) NOT NULL DEFAULT '0', `ip_address` varchar(255) NOT NULL, `hostname` varchar(255) DEFAULT NULL, `vm_password` varchar(255) DEFAULT NULL, `start_boot` varchar(255) NOT NULL DEFAULT 'y', `active` varchar(255) NOT NULL DEFAULT 'y', `active_until_date` date NOT NULL, `description` text, `diskspace` int(11) NOT NULL DEFAULT '0', `traffic` int(11) NOT NULL DEFAULT '-1', `bandwidth` int(11) NOT NULL DEFAULT '-1', `ram` int(11) NOT NULL DEFAULT '0', `ram_burst` int(11) NOT NULL DEFAULT '0', `cpu_units` int(11) NOT NULL DEFAULT '1000', `cpu_num` int(11) NOT NULL DEFAULT '4', `cpu_limit` int(11) NOT NULL DEFAULT '400', `io_priority` int(11) NOT NULL DEFAULT '4', `nameserver` varchar(255) NOT NULL DEFAULT '8.8.8.8 8.8.4.4', `create_dns` varchar(1) NOT NULL DEFAULT 'n', `capability` text NOT NULL, `config` mediumtext NOT NULL, PRIMARY KEY (`vm_id`) ) DEFAULT CHARSET=utf8 ; -- -- Dumping data for table `openvz_vm` -- -- -------------------------------------------------------- ispconfig3_install/install/sql/incremental/upd_0105.sql0000775000000000000000000000077315267416152022117 0ustar rootroot-- Store the process id of the cron run that started a cron job, so that a job which is still marked -- as running after its cron run has died can be detected and started again. ALTER TABLE `sys_cron` ADD COLUMN `pid` int(11) unsigned NULL DEFAULT NULL; -- Release cron job locks that were left behind by an aborted cron run and that could not be -- released automatically because no start time had been recorded for the job. UPDATE `sys_cron` SET `running` = 0 WHERE `running` = 1 AND `last_run` IS NULL; ispconfig3_install/install/sql/incremental/upd_0068.sql0000775000000000000000000000031615114346020022103 0ustar rootrootALTER TABLE `web_domain` ADD UNIQUE `serverdomain` ( `server_id` , `domain` ); ALTER TABLE `dns_rr` DROP KEY rr, CHANGE `name` `name` VARCHAR( 128 ) NOT NULL, ADD KEY `rr` (`zone`,`type`,`name`); ispconfig3_install/install/sql/incremental/upd_0108.sql0000775000000000000000000000562715273367323022127 0ustar rootroot-- Log out all panel users once DELETE FROM `sys_session`; -- Grant the new datalog function permission to remote users with the server functions UPDATE `remote_user` SET `remote_functions` = CONCAT(`remote_functions`, ';sys_datalog_get') WHERE CONCAT(',', REPLACE(`remote_functions`, ';', ','), ',') LIKE '%,server_get,%' AND CONCAT(',', REPLACE(`remote_functions`, ';', ','), ',') REGEXP ',(server_config_set|get_function_list|client_templates_get_all|server_get_serverid_by_ip|server_ip_get|server_ip_add|server_ip_update|server_ip_delete|system_config_set|system_config_get|config_value_get|config_value_add|config_value_update|config_value_replace|config_value_delete),' AND CONCAT(',', REPLACE(`remote_functions`, ';', ','), ',') NOT LIKE '%,sys_datalog_get,%'; -- openvz_vm: new installs created the iptables column as iptabless ALTER TABLE `openvz_vm` CHANGE `iptabless` `iptables` TEXT DEFAULT NULL; -- sys_remoteaction: new installs created action_type with 20 characters, too short for extension_license_update ALTER TABLE `sys_remoteaction` CHANGE `action_type` `action_type` varchar(64) NOT NULL DEFAULT ''; -- utf8mb4: convert the tables that are still utf8/utf8mb3 (upd_0103 stopped at the first table that failed); -- old MyISAM tables become InnoDB (key length), zero dates are kept, a table that fails is reported and skipped. -- A database that is already utf8mb4 keeps its collation (fresh installs use the server default) SET @old_sql_mode = @@SESSION.sql_mode; SET SESSION sql_mode = 'NO_ENGINE_SUBSTITUTION'; SET @ispc_collation = IF(@@collation_database LIKE 'utf8mb4%', @@collation_database, 'utf8mb4_unicode_ci'); SET @sql_stmt = CONCAT('ALTER DATABASE CHARACTER SET utf8mb4 COLLATE ', @ispc_collation); PREPARE stmt FROM @sql_stmt; EXECUTE stmt; DEALLOCATE PREPARE stmt; DROP PROCEDURE IF EXISTS ispc_convert_utf8mb4; DELIMITER $$ CREATE PROCEDURE ispc_convert_utf8mb4() BEGIN DECLARE done INT DEFAULT FALSE; DECLARE tbl VARCHAR(255); DECLARE cur CURSOR FOR SELECT TABLE_NAME FROM information_schema.TABLES WHERE TABLE_SCHEMA = DATABASE() AND TABLE_TYPE = 'BASE TABLE' AND TABLE_COLLATION NOT LIKE 'utf8mb4%'; DECLARE CONTINUE HANDLER FOR NOT FOUND SET done = TRUE; OPEN cur; read_loop: LOOP FETCH cur INTO tbl; IF done THEN LEAVE read_loop; END IF; SET @sql_stmt = CONCAT('ALTER TABLE `', tbl, '` ENGINE=InnoDB, ROW_FORMAT=DYNAMIC, CONVERT TO CHARACTER SET utf8mb4 COLLATE ', @ispc_collation); BEGIN DECLARE CONTINUE HANDLER FOR SQLEXCEPTION BEGIN GET DIAGNOSTICS CONDITION 1 @sql_error = MESSAGE_TEXT; SELECT CONCAT('utf8mb4 conversion failed for table ', tbl, ': ', @sql_error) AS warning; END; PREPARE stmt FROM @sql_stmt; EXECUTE stmt; DEALLOCATE PREPARE stmt; END; END LOOP; CLOSE cur; END$$ DELIMITER ; CALL ispc_convert_utf8mb4(); DROP PROCEDURE ispc_convert_utf8mb4; SET SESSION sql_mode = @old_sql_mode; ispconfig3_install/install/sql/incremental/upd_0045.sql0000775000000000000000000000041415114346020022075 0ustar rootrootUPDATE `web_domain` SET `redirect_path` = CONCAT(`redirect_path`, '/') WHERE `redirect_path` != '' AND RIGHT(`redirect_path`, 1) != '/' AND (LEFT(`redirect_path`, 7) = 'http://' OR LEFT(`redirect_path`, 8) = 'https://' OR LEFT(`redirect_path`, 11) = '[scheme]://'); ispconfig3_install/install/sql/incremental/upd_0059.sql0000775000000000000000000000013015114346020022075 0ustar rootrootALTER TABLE `client` CHANGE `company_id` `company_id` VARCHAR( 255 ) NULL DEFAULT NULL ;ispconfig3_install/install/sql/incremental/upd_0107.sql0000775000000000000000000002466315267416152022125 0ustar rootroot-- ============================================================= -- CA list corrections -- Ref: issue #7017 -- Sources: CCADB AllCAAIdentifiersReport 2026-06-10 -- SSLMate CAA helper CA list 2026-06-10 -- -- Changes vs original: -- REMOVE - distrusted / defunct / removed CAs -- UPDATE - wrong ca_issue domains -- UPDATE - wrong / outdated ca_name values -- ADD - CAs missing from the table -- ============================================================= -- ------------------------------------------------------------- -- REMOVE: distrusted / defunct CAs -- ------------------------------------------------------------- -- WoSign: distrusted by all major browsers since 2016/2017 (certificate backdating, fraud) DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'wosign.com'; -- StartCom: distrusted by all major browsers; shut down January 2018 DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'startcomca.com'; -- AC Camerfirma: distrusted by Chrome and Firefox for repeated compliance failures DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'camerfirma.com'; -- Entrust: distrusted by Chrome and Mozilla for new issuances since Nov 2024 DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'entrust.net'; -- Symantec: distrusted by all browsers since 2018; CA sold to DigiCert -- symantec.com remains a recognised alias under DigiCert but not a standalone entry DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'symantec.com'; -- PROCERT: Venezuelan CA with documented Mozilla compliance issues; ceased operations DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'procert.net.ve'; -- DocuSign: exited the CA business DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'docusign.fr'; -- ------------------------------------------------------------- -- UPDATE: wrong ca_issue domains -- ------------------------------------------------------------- -- Certinomis: CCADB/SSLMate primary is www.certinomis.com; owner is now Docaposte UPDATE `dns_ssl_ca` SET `ca_name` = 'Certinomis (Docaposte)', `ca_issue` = 'www.certinomis.com' WHERE `ca_name` = 'Certinomis'; -- PKIoverheid: correct CAA domain pkioverheid.nl (was stored as a markdown hyperlink) UPDATE `dns_ssl_ca` SET `ca_issue` = 'pkioverheid.nl' WHERE `ca_name` = 'PKIoverheid'; -- Chunghwa Telecom: CCADB/SSLMate primary is pki.hinet.net, not cht.com.tw UPDATE `dns_ssl_ca` SET `ca_issue` = 'pki.hinet.net' WHERE `ca_name` = 'Chunghwa Telecom'; -- D-TRUST: CCADB/SSLMate primary is dtrust.de UPDATE `dns_ssl_ca` SET `ca_issue` = 'dtrust.de' WHERE `ca_name` = 'D-TRUST'; -- Certizen: SSLMate primary is ecert.gov.hk (hongkongpost.gov.hk is secondary) UPDATE `dns_ssl_ca` SET `ca_issue` = 'ecert.gov.hk' WHERE `ca_name` = 'Certizen'; -- ------------------------------------------------------------- -- UPDATE: outdated ca_name values -- ------------------------------------------------------------- -- Asseco is the parent; Certum is the CA brand (CCADB: "Asseco Data Systems S.A.") UPDATE `dns_ssl_ca` SET `ca_name` = 'Certum (Asseco Data Systems)' WHERE `ca_issue` = 'certum.pl'; -- Atos rebranded to Eviden in 2023 (CCADB: "Eviden") UPDATE `dns_ssl_ca` SET `ca_name` = 'Eviden (Atos TrustedRoot)', `ca_issue` = 'atos.net' WHERE `ca_name` = 'Atos TrustedRoot'; -- "(formerly Comodo CA)" is now ~6 years stale UPDATE `dns_ssl_ca` SET `ca_name` = 'Sectigo' WHERE `ca_name` = 'Sectigo (formerly Comodo CA)'; -- DigiCert acquired Thawte, GeoTrust, RapidSSL; all covered by digicert.com UPDATE `dns_ssl_ca` SET `ca_name` = 'DigiCert (incl. Thawte, GeoTrust, RapidSSL)' WHERE `ca_issue` = 'digicert.com'; -- T-Systems PKI business now operates as Deutsche Telekom Security GmbH -- telesec.de is the CAA domain (SSLMate aka: "Deutsche Telekom Security GmbH, TeleSec, T-Systems") UPDATE `dns_ssl_ca` SET `ca_name` = 'Deutsche Telekom Security (T-Systems)' WHERE `ca_name` = 'T-Systems'; -- WISeKey operates under the OISTE Foundation root (SSLMate primary name: "OISTE") UPDATE `dns_ssl_ca` SET `ca_name` = 'OISTE (WISeKey)' WHERE `ca_issue` = 'wisekey.com'; -- Microsec is the correct short name (SSLMate: "Microsec"; product brand: e-Szigno) UPDATE `dns_ssl_ca` SET `ca_name` = 'Microsec (e-Szigno)' WHERE `ca_name` = 'Microsec e-Szigno'; -- Sertifitseerimiskeskuse rebranded to SK ID Solutions; CAA domain is skidsolutions.eu UPDATE `dns_ssl_ca` SET `ca_name` = 'SK ID Solutions', `ca_issue` = 'skidsolutions.eu' WHERE `ca_issue` = 'sk.ee'; -- ------------------------------------------------------------- -- ADD: CAs missing from the table -- ------------------------------------------------------------- INSERT INTO `dns_ssl_ca` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `active`, `ca_name`, `ca_issue`, `ca_wildcard`, `ca_iodef`, `ca_critical`) VALUES -- Apple: publicly trusted CA (SSLMate) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Apple', 'pki.apple.com', 'Y', '', 0), -- ANF AC: Spanish CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'ANF AC', 'anf.es', 'Y', '', 0), -- BJCA: Beijing Certificate Authority in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'BJCA', 'bjca.cn', 'Y', '', 0), -- Certicámara: Colombian CA in Mozilla root store (CCADB) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certicámara', 'certicamara.com', 'Y', '', 0), -- Certigna: French CA by Dhimyotis/Tessi; in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certigna', 'certigna.fr', 'Y', '', 0), -- Certainly: Fastly's publicly trusted CA; accepted by Mozilla/Apple/Google since 2023 (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certainly', 'certainly.com', 'Y', '', 0), -- Cybertrust Japan / JCSI: Japanese CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Cybertrust Japan / JCSI', 'cybertrust.co.jp', 'Y', '', 0), -- DFN-PKI: German research network CA (SSLMate); intermediate under Deutsche Telekom (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'DFN-PKI', 'pki.dfn.de', 'Y', '', 0), -- eMudhra / emSign: Indian CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'emSign (eMudhra)', 'emsign.com', 'Y', '', 0), -- Eviden (Atos TrustedRoot): German CA; Mozilla-trusted roots added 2021; rebranded 2023 (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Eviden (Atos TrustedRoot)', 'atos.net', 'Y', '', 0), -- GDCA: Chinese CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GDCA', 'gdca.com.cn', 'Y', '', 0), -- GLOBALTRUST: Austrian CA (e-commerce monitoring GmbH); in SSLMate list (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GLOBALTRUST', 'globaltrust.eu', 'Y', '', 0), -- GRCA: Government of Taiwan Root Certification Authority (SSLMate) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GRCA', 'gca.nat.gov.tw', 'Y', '', 0), -- iTrusChina: Chinese CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'iTrusChina', 'itrus.cn', 'Y', '', 0), -- KIR: Polish CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'KIR (Poland)', 'elektronicznypodpis.pl', 'Y', '', 0), -- KPN: Dutch telecom CA (SSLMate) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'KPN', 'kpn.com', 'Y', '', 0), -- MULTICERT: Portuguese CA in Mozilla root store (CCADB) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'MULTICERT', 'multicert.com', 'Y', '', 0), -- NAVER Cloud Trust Services: Korean CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'NAVER Cloud Trust Services', 'navercloudtrust.com', 'Y', '', 0), -- Network Solutions (Web.com): US registrar CA (SSLMate) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Network Solutions (Web.com)', 'web.com', 'Y', '', 0), -- PostSignum: Czech postal CA in Mozilla root store (CCADB) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'PostSignum', 'postsignum.cz', 'Y', '', 0), -- SHECA: Shanghai Electronic Certification Authority in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SHECA', 'sheca.com', 'Y', '', 0), -- SK ID Solutions: Estonian CA; rebranded from Sertifitseerimiskeskuse; CAA: skidsolutions.eu (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SK ID Solutions', 'skidsolutions.eu', 'Y', '', 0), -- SSL.com: major commercial CA; also now backend for Entrust issuances (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SSL.com', 'ssl.com', 'Y', '', 0), -- Swiss Federal IT (FOITT): admin.ch CA in CCADB (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Swiss Federal IT (FOITT)', 'admin.ch', 'Y', '', 0), -- TrustAsia: widely used Asia-Pacific CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TrustAsia', 'trustasia.com', 'Y', '', 0), -- TunTrust: Tunisian national CA (ANCE) in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TunTrust (ANCE)', 'tuntrust.tn', 'Y', '', 0), -- TWCA: Taiwan CA in Mozilla root store (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TWCA', 'twca.com.tw', 'Y', '', 0), -- Viking Cloud (Trustwave / SecureTrust): rebranded from Trustwave (SSLMate) (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Viking Cloud (Trustwave)', 'trustwave.com', 'Y', '', 0); -- The public key comment contains the domain or user name, so ssh-keygen output for a -- 3072 bit key with a long domain name exceeds 600 characters (#7074). ALTER TABLE `client` CHANGE `ssh_rsa` `ssh_rsa` text; ALTER TABLE `sys_user` CHANGE `id_rsa` `id_rsa` text, CHANGE `ssh_rsa` `ssh_rsa` text; -- Give the caching_sha2_password hash column the same length as the other password columns, -- the generated hash is exactly 70 characters long and pre-hashed values passed through the -- remote API (e.g. by the Migration Tool) can be longer (#7074). ALTER TABLE `web_database_user` CHANGE `database_password_sha2` `database_password_sha2` varchar(255) DEFAULT NULL; ispconfig3_install/install/sql/incremental/upd_0007.sql0000775000000000000000000000145415114346020022100 0ustar rootrootALTER TABLE client ADD COLUMN limit_mailmailinglist int(11) NOT NULL default '-1'; ALTER TABLE client_template ADD COLUMN limit_mailmailinglist int(11) NOT NULL default '-1'; CREATE TABLE IF NOT EXISTS `mail_mailinglist` ( `mailinglist_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL, `sys_perm_group` varchar(5) character set ucs2 NOT NULL, `sys_perm_other` varchar(5) NOT NULL, `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL, `listname` varchar(255) NOT NULL, `email` varchar(255) NOT NULL, `password` varchar(255) NOT NULL, PRIMARY KEY (`mailinglist_id`) ) AUTO_INCREMENT=1; DROP TABLE `mail_mailman_domain`;ispconfig3_install/install/sql/incremental/upd_0029.sql0000775000000000000000000000053315114346020022101 0ustar rootrootALTER TABLE `web_domain` CHANGE `pm_max_children` `pm_max_children` INT( 11 ) NOT NULL DEFAULT '10', CHANGE `pm_start_servers` `pm_start_servers` INT( 11 ) NOT NULL DEFAULT '2', CHANGE `pm_min_spare_servers` `pm_min_spare_servers` INT( 11 ) NOT NULL DEFAULT '1', CHANGE `pm_max_spare_servers` `pm_max_spare_servers` INT( 11 ) NOT NULL DEFAULT '5';ispconfig3_install/install/sql/incremental/upd_0069.sql0000775000000000000000000000012215114346020022077 0ustar rootrootALTER TABLE `cron` ADD `log` enum('n','y') NOT NULL default 'n' AFTER `run_wday`; ispconfig3_install/install/sql/incremental/upd_dev_collection.sql0000775000000000000000000000000015253217606024500 0ustar rootrootispconfig3_install/install/sql/incremental/upd_0040.sql0000775000000000000000000000161315114346020022072 0ustar rootroot -- Removal of the domain module UPDATE sys_user SET startmodule = 'dashboard' WHERE startmodule = 'domain'; UPDATE sys_user SET modules = replace(modules, ',domain', '') WHERE modules like '%domain%'; -- -------------------------------------------------------- -- -- Table structure for table `directive_snippets` -- CREATE TABLE IF NOT EXISTS `directive_snippets` ( `directive_snippets_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `name` varchar(255) DEFAULT NULL, `type` varchar(255) DEFAULT NULL, `snippet` mediumtext, `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`directive_snippets_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ispconfig3_install/install/sql/incremental/upd_0063.sql0000775000000000000000000000204015114346020022072 0ustar rootrootALTER TABLE `client` ADD `limit_domainmodule` INT NOT NULL DEFAULT '0'; ALTER TABLE `client_template` ADD `limit_domainmodule` INT NOT NULL DEFAULT '0'; CREATE TABLE `client_message_template` ( `client_message_template_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_type` varchar(255) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `subject` varchar(255) DEFAULT NULL, `message` text, PRIMARY KEY (`client_message_template_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `spamfilter_policy` ADD `policyd_quota_in` int(11) NOT NULL DEFAULT '-1', ADD `policyd_quota_in_period` int(11) NOT NULL DEFAULT '24', ADD `policyd_quota_out` int(11) NOT NULL DEFAULT '-1', ADD `policyd_quota_out_period` int(11) NOT NULL DEFAULT '24', ADD `policyd_greylist` ENUM( 'Y', 'N' ) NOT NULL DEFAULT 'N'; ispconfig3_install/install/sql/incremental/upd_0083.sql0000775000000000000000000000256715114346020022112 0ustar rootrootALTER TABLE `client` CHANGE `web_servers` `web_servers` TEXT NULL DEFAULT NULL; ALTER TABLE `client` CHANGE `mail_servers` `mail_servers` TEXT NULL DEFAULT NULL; ALTER TABLE `client` CHANGE `xmpp_servers` `xmpp_servers` TEXT NULL DEFAULT NULL; ALTER TABLE `client` CHANGE `db_servers` `db_servers` TEXT NULL DEFAULT NULL; ALTER TABLE `client` CHANGE `dns_servers` `dns_servers` TEXT NULL DEFAULT NULL; UPDATE client SET web_servers = default_webserver WHERE (web_servers = '' OR web_servers IS NULL); UPDATE client SET mail_servers = default_mailserver WHERE (mail_servers = '' OR mail_servers IS NULL); UPDATE client SET xmpp_servers = default_xmppserver WHERE (xmpp_servers = '' OR xmpp_servers IS NULL); UPDATE client SET db_servers = default_dbserver WHERE (db_servers = '' OR db_servers IS NULL); UPDATE client SET dns_servers = default_dnsserver WHERE (dns_servers = '' OR dns_servers IS NULL); ALTER TABLE `client_template` ADD `default_slave_dnsserver` INT NOT NULL DEFAULT '0' AFTER `limit_dns_slave_zone`; ALTER TABLE `client_template` ADD `mail_servers` TEXT NULL DEFAULT NULL AFTER `template_type`; ALTER TABLE `client_template` ADD `web_servers` TEXT NULL DEFAULT NULL AFTER `limit_xmpp_httparchive`; ALTER TABLE `client_template` ADD `dns_servers` TEXT NULL DEFAULT NULL AFTER `limit_aps`; ALTER TABLE `client_template` ADD `db_servers` TEXT NULL DEFAULT NULL AFTER `limit_dns_record`;ispconfig3_install/install/sql/incremental/upd_0065.sql0000775000000000000000000000117115114346020022100 0ustar rootrootALTER TABLE `web_backup` ADD `filesize` VARCHAR(10) NOT NULL AFTER `filename`; ALTER TABLE `client_template` CHANGE `limit_aps` `limit_aps` INT( 11 ) NOT NULL DEFAULT '-1'; ALTER TABLE `mail_domain` ADD `dkim_public` MEDIUMTEXT NULL AFTER `domain`; ALTER TABLE `mail_domain` ADD `dkim_private` MEDIUMTEXT NULL AFTER `domain`; ALTER TABLE `mail_domain` ADD `dkim` ENUM( 'n', 'y' ) NOT NULL AFTER `domain`; ALTER TABLE `web_backup` CHANGE `backup_type` `backup_type` enum('web','mysql','mongodb') NOT NULL DEFAULT 'web'; ALTER TABLE `web_database_user` ADD `database_password_mongo` varchar(32) DEFAULT NULL AFTER `database_password`; ispconfig3_install/install/sql/incremental/upd_0073.sql0000775000000000000000000000066515114346020022106 0ustar rootrootALTER TABLE `client_template` ADD `limit_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_webdav_user`; ALTER TABLE `client` ADD `limit_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_webdav_user`; ALTER TABLE `web_domain` CHANGE `php_fpm_use_socket` `php_fpm_use_socket` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y'; ALTER TABLE `mail_domain` ADD `dkim_selector` VARCHAR(63) NOT NULL DEFAULT 'default' AFTER `dkim`; ispconfig3_install/install/sql/incremental/upd_0074.sql0000775000000000000000000002615315114346020022107 0ustar rootrootALTER TABLE `aps_instances` CHANGE `customer_id` `customer_id` int(4) NOT NULL DEFAULT '0', CHANGE `package_id` `package_id` int(4) NOT NULL DEFAULT '0', CHANGE `instance_status` `instance_status` int(4) NOT NULL DEFAULT '0'; ALTER TABLE `aps_instances_settings` CHANGE `instance_id` `instance_id` int(4) NOT NULL DEFAULT '0', CHANGE `name` `name` varchar(255) NOT NULL DEFAULT '', CHANGE `value` `value` text; ALTER TABLE `aps_packages` CHANGE `path` `path` varchar(255) NOT NULL DEFAULT '', CHANGE `name` `name` varchar(255) NOT NULL DEFAULT '', CHANGE `category` `category` varchar(255) NOT NULL DEFAULT '', CHANGE `version` `version` varchar(20) NOT NULL DEFAULT '', CHANGE `release` `release` int(4) NOT NULL DEFAULT '0', CHANGE `package_url` `package_url` TEXT; ALTER TABLE `aps_settings` CHANGE `name` `name` varchar(255) NOT NULL DEFAULT '', CHANGE `value` `value` text; ALTER TABLE `attempts_login` CHANGE `ip` `ip` varchar(39) NOT NULL DEFAULT ''; ALTER TABLE `client` CHANGE `internet` `internet` varchar(255) NOT NULL DEFAULT '', CHANGE `mail_servers` `mail_servers` blob, CHANGE `web_servers` `web_servers` blob, CHANGE `db_servers` `db_servers` blob, CHANGE `dns_servers` `dns_servers` blob, CHANGE `template_additional` `template_additional` text; ALTER TABLE `client_template` CHANGE `template_name` `template_name` varchar(64) NOT NULL DEFAULT ''; ALTER TABLE `country` CHANGE `iso` `iso` char(2) NOT NULL DEFAULT '', CHANGE `name` `name` varchar(64) NOT NULL DEFAULT '', CHANGE `printable_name` `printable_name` varchar(64) NOT NULL DEFAULT ''; ALTER TABLE `cron` CHANGE `command` `command` TEXT; ALTER TABLE `dns_rr` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `zone` `zone` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `name` `name` varchar(255) NOT NULL DEFAULT '', CHANGE `data` `data` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `dns_slave` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `origin` `origin` varchar(255) NOT NULL DEFAULT '', CHANGE `ns` `ns` varchar(255) NOT NULL DEFAULT '', CHANGE `active` `active` enum('N','Y') NOT NULL DEFAULT 'N', CHANGE `xfer` `xfer` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `dns_soa` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `origin` `origin` varchar(255) NOT NULL DEFAULT '', CHANGE `ns` `ns` varchar(255) NOT NULL DEFAULT '', CHANGE `mbox` `mbox` varchar(255) NOT NULL DEFAULT '', CHANGE `active` `active` enum('N','Y') NOT NULL DEFAULT 'N', CHANGE `xfer` `xfer` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `mail_access` CHANGE `source` `source` varchar(255) NOT NULL DEFAULT '', CHANGE `access` `access` varchar(255) NOT NULL DEFAULT '', CHANGE `type` `type` set('recipient','sender','client') NOT NULL DEFAULT 'recipient'; ALTER TABLE `mail_backup` CHANGE `server_id` `server_id` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `parent_domain_id` `parent_domain_id` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `mailuser_id` `mailuser_id` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `tstamp` `tstamp` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `filename` `filename` varchar(255) NOT NULL DEFAULT '', CHANGE `filesize` `filesize` VARCHAR(10) NOT NULL DEFAULT ''; ALTER TABLE `mail_domain` CHANGE `active` `active` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `mail_forwarding` CHANGE `source` `source` varchar(255) NOT NULL DEFAULT '', CHANGE `active` `active` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `mail_mailinglist` CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `domain` `domain` varchar(255) NOT NULL DEFAULT '', CHANGE `listname` `listname` varchar(255) NOT NULL DEFAULT '', CHANGE `email` `email` varchar(255) NOT NULL DEFAULT '', CHANGE `password` `password` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `mail_traffic` CHANGE `mailuser_id` `mailuser_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `month` `month` char(7) NOT NULL DEFAULT '', CHANGE `traffic` `traffic` bigint(20) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `mail_transport` CHANGE `transport` `transport` varchar(255) NOT NULL DEFAULT '', CHANGE `active` `active` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `mail_user` CHANGE `login` `login` varchar(255) NOT NULL default '', CHANGE `password` `password` varchar(255) NOT NULL default '', CHANGE `homedir` `homedir` varchar(255) NOT NULL default '', CHANGE `postfix` `postfix` enum('n','y') NOT NULL default 'y', CHANGE `access` `access` enum('n','y') NOT NULL default 'y'; ALTER TABLE `monitor_data` CHANGE `server_id` `server_id` int(11) unsigned NOT NULL default '0', CHANGE `type` `type` varchar(255) NOT NULL default '', CHANGE `created` `created` int(11) unsigned NOT NULL default '0', CHANGE `data` `data` mediumtext; ALTER TABLE `openvz_ostemplate` CHANGE `template_file` `template_file` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `openvz_traffic` CHANGE `veid` `veid` int(11) NOT NULL DEFAULT '0', CHANGE `traffic_date` `traffic_date` date NOT NULL DEFAULT '0000-00-00'; ALTER TABLE `openvz_vm` CHANGE `veid` `veid` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `ip_address` `ip_address` varchar(255) NOT NULL DEFAULT '', CHANGE `active_until_date` `active_until_date` date NOT NULL DEFAULT '0000-00-00', CHANGE `capability` `capability` text, CHANGE `config` `config` mediumtext; ALTER TABLE `remote_session` CHANGE `remote_session` `remote_session` varchar(64) NOT NULL DEFAULT '', CHANGE `remote_userid` `remote_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `remote_functions` `remote_functions` text, CHANGE `tstamp` `tstamp` int(10) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `remote_user` CHANGE `remote_username` `remote_username` varchar(64) NOT NULL DEFAULT '', CHANGE `remote_password` `remote_password` varchar(64) NOT NULL DEFAULT '', CHANGE `remote_functions` `remote_functions` text; ALTER TABLE `server` CHANGE `config` `config` text; ALTER TABLE `shell_user` CHANGE `chroot` `chroot` varchar(255) NOT NULL DEFAULT '', CHANGE `ssh_rsa` `ssh_rsa` text; ALTER TABLE `software_update` CHANGE `software_repo_id` `software_repo_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `package_name` `package_name` varchar(64) NOT NULL DEFAULT '', CHANGE `update_url` `update_url` varchar(255) NOT NULL DEFAULT '', CHANGE `update_md5` `update_md5` varchar(255) NOT NULL DEFAULT '', CHANGE `update_dependencies` `update_dependencies` varchar(255) NOT NULL DEFAULT '', CHANGE `update_title` `update_title` varchar(64) NOT NULL DEFAULT ''; ALTER TABLE `software_update_inst` CHANGE `package_name` `package_name` varchar(64) NOT NULL DEFAULT '', CHANGE `server_id` `server_id` int(11) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `spamfilter_policy` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT ''; ALTER TABLE `spamfilter_users` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `server_id` `server_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `email` `email` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `spamfilter_wblist` CHANGE `sys_userid` `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_groupid` `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `sys_perm_user` `sys_perm_user` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_group` `sys_perm_group` varchar(5) NOT NULL DEFAULT '', CHANGE `sys_perm_other` `sys_perm_other` varchar(5) NOT NULL DEFAULT '', CHANGE `server_id` `server_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `rid` `rid` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `email` `email` varchar(255) NOT NULL DEFAULT '', CHANGE `priority` `priority` tinyint(3) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `sys_config` CHANGE `group` `group` varchar(64) NOT NULL DEFAULT '', CHANGE `name` `name` varchar(64) NOT NULL DEFAULT '', CHANGE `value` `value` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `sys_cron` CHANGE `name` `name` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `sys_datalog` CHANGE `server_id` `server_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `data` `data` longtext; ALTER TABLE `sys_group` CHANGE `description` `description` text; ALTER TABLE `sys_ini` CHANGE `config` `config` longtext; ALTER TABLE `sys_log` CHANGE `tstamp` `tstamp` int(11) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `sys_remoteaction` CHANGE `server_id` `server_id` int(11) unsigned NOT NULL DEFAULT '0', CHANGE `tstamp` `tstamp` int(11) NOT NULL DEFAULT '0', CHANGE `action_type` `action_type` varchar(20) NOT NULL DEFAULT '', CHANGE `action_param` `action_param` mediumtext, CHANGE `action_state` `action_state` enum('pending','ok','warning','error') NOT NULL DEFAULT 'pending', CHANGE `response` `response` mediumtext; ALTER TABLE `sys_theme` CHANGE `tpl_name` `tpl_name` varchar(32) NOT NULL DEFAULT '', CHANGE `username` `username` varchar(64) NOT NULL DEFAULT '', CHANGE `logo_url` `logo_url` varchar(255) NOT NULL DEFAULT ''; ALTER TABLE `sys_user` CHANGE `groups` `groups` TEXT; ALTER TABLE `web_backup` CHANGE `server_id` `server_id` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `parent_domain_id` `parent_domain_id` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `tstamp` `tstamp` int(10) unsigned NOT NULL DEFAULT '0', CHANGE `filename` `filename` varchar(255) NOT NULL DEFAULT '', CHANGE `filesize` `filesize` VARCHAR(10) NOT NULL DEFAULT ''; ALTER TABLE `web_database` CHANGE `remote_ips` `remote_ips` text; ALTER TABLE `web_traffic` CHANGE `hostname` `hostname` varchar(255) NOT NULL DEFAULT '', CHANGE `traffic_date` `traffic_date` date NOT NULL DEFAULT '0000-00-00'; ispconfig3_install/install/sql/incremental/upd_0018.sql0000775000000000000000000000033515114346020022077 0ustar rootrootalter table client_template add column web_php_options varchar(255) not null default 'no' after limit_web_quota; alter table client_template add column ssh_chroot varchar(255) not null default 'no' after limit_shell_user;ispconfig3_install/install/sql/incremental/upd_0048.sql0000775000000000000000000000012415114346020022076 0ustar rootrootALTER TABLE `client` CHANGE `limit_aps` `limit_aps` INT( 11 ) NOT NULL DEFAULT '-1';ispconfig3_install/install/sql/incremental/upd_0041.sql0000775000000000000000000000016315114346020022072 0ustar rootroot -- Add bank account owner ALTER TABLE `client` ADD `bank_account_owner` varchar(255) DEFAULT NULL AFTER `notes`; ispconfig3_install/install/sql/incremental/upd_0076.sql0000775000000000000000000000011315114346020022075 0ustar rootrootALTER TABLE `dns_rr` CHANGE `name` `name` varchar(255) NOT NULL DEFAULT '';ispconfig3_install/install/sql/incremental/upd_0051.sql0000775000000000000000000000041015114346020022066 0ustar rootrootUPDATE `country` SET `iso` = 'RS', `name` = 'SERBIA', `printable_name` = 'Serbia', `iso3` = 'SRB', `numcode` = 381 WHERE `iso` = 'CS'; INSERT INTO `country` (`iso`, `name`, `printable_name`, `iso3`, `numcode`) VALUES ('ME', 'MONTENEGRO', 'Montenegro', 'MNE', 382);ispconfig3_install/install/sql/incremental/upd_0093.sql0000775000000000000000000000240415114346020022101 0ustar rootrootALTER TABLE `remote_user` MODIFY `remote_password` VARCHAR(200) NOT NULL DEFAULT ''; ALTER TABLE `client` ADD COLUMN `limit_mail_wblist` INT(11) NOT NULL DEFAULT '0' AFTER `limit_mailrouting`; ALTER TABLE `client_template` ADD COLUMN `limit_mail_wblist` INT(11) NOT NULL DEFAULT '0' AFTER `limit_mailrouting`; ALTER TABLE mail_access DROP CONSTRAINT `server_id`; SET SESSION old_alter_table=1; ALTER IGNORE TABLE mail_access ADD UNIQUE KEY `unique_source` (`server_id`,`source`,`type`); SET SESSION old_alter_table=0; ALTER TABLE mail_domain ADD COLUMN `relay_host` varchar(255) NOT NULL default '' AFTER `dkim_public`, ADD COLUMN `relay_user` varchar(255) NOT NULL default '' AFTER `relay_host`, ADD COLUMN `relay_pass` varchar(255) NOT NULL default '' AFTER `relay_user`; -- Purge apps & addons installer (#5795) DROP TABLE `software_package`; DROP TABLE `software_repo`; DROP TABLE `software_update`; DROP TABLE `software_update_inst`; -- Brexit UPDATE `country` SET `eu` = 'n' WHERE `iso` = 'GB'; -- Add limit for per domain relaying ALTER TABLE `client` ADD `limit_relayhost` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_spamfilter_policy`; ALTER TABLE `client_template` ADD `limit_relayhost` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_spamfilter_policy`; ispconfig3_install/install/sql/incremental/upd_0106.sql0000775000000000000000000000111015267416152022102 0ustar rootroot-- Master database rights that extensions declare for their own tables (install/master_grants.list -- of the extension). Read by the updater when it rebuilds the rights of the ispcsrv users. CREATE TABLE IF NOT EXISTS `sys_extension_grant` ( `grant_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `extension` varchar(64) NOT NULL DEFAULT '', `table_name` varchar(64) NOT NULL DEFAULT '', `privileges` varchar(64) NOT NULL DEFAULT '', PRIMARY KEY (`grant_id`), UNIQUE KEY `extension_table` (`extension`,`table_name`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1; ispconfig3_install/install/sql/incremental/upd_0039.sql0000775000000000000000000000323415114346020022103 0ustar rootroot-- -------------------------------------------------------- -- -- Tabellenstruktur für Tabelle `web_database_user` -- CREATE TABLE IF NOT EXISTS `web_database_user` ( `database_user_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) UNSIGNED NOT NULL DEFAULT '0', `database_user` varchar(64) DEFAULT NULL, `database_password` varchar(64) DEFAULT NULL, PRIMARY KEY (`database_user_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- ALTER TABLE `web_database` ADD `database_user_id` INT( 11 ) UNSIGNED NULL DEFAULT NULL AFTER `database_password` , ADD `database_ro_user_id` INT( 11 ) UNSIGNED NULL DEFAULT NULL AFTER `database_user_id`, ADD INDEX ( `database_user_id` ), ADD INDEX ( `database_ro_user_id` ) ; -- -------------------------------------------------------- INSERT INTO `web_database_user` SELECT NULL, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, '0', `database_user`, `database_password` FROM `web_database` WHERE 1; -- -------------------------------------------------------- UPDATE `web_database`, `web_database_user` SET `web_database`.`database_user_id` = `web_database_user`.`database_user_id` WHERE `web_database_user`.`database_user` = `web_database`.`database_user`; -- -------------------------------------------------------- ALTER TABLE `web_database` DROP `database_user`, DROP `database_password`; ispconfig3_install/install/sql/incremental/upd_0091.sql0000775000000000000000000000434115114346020022101 0ustar rootroot-- we need those to fix some installations failing in 0089 and 0090 ALTER TABLE `web_domain` ROW_FORMAT=DYNAMIC; ALTER TABLE `mail_user` ROW_FORMAT=DYNAMIC; ALTER TABLE `web_domain` ADD COLUMN `proxy_protocol` ENUM('n','y') NOT NULL DEFAULT 'n' AFTER `log_retention`; ALTER TABLE `web_domain` ADD `backup_format_web` VARCHAR( 255 ) NOT NULL default 'default' AFTER `backup_copies`; ALTER TABLE `web_domain` ADD `backup_format_db` VARCHAR( 255 ) NOT NULL default 'gzip' AFTER `backup_format_web`; ALTER TABLE `web_domain` ADD `backup_encrypt` enum('n','y') NOT NULL DEFAULT 'n' AFTER `backup_format_db`; ALTER TABLE `web_domain` ADD `backup_password` VARCHAR( 255 ) NOT NULL DEFAULT '' AFTER `backup_encrypt`; ALTER TABLE `web_backup` ADD `backup_format` VARCHAR( 64 ) NOT NULL DEFAULT '' AFTER `backup_mode`; ALTER TABLE `web_backup` ADD `backup_password` VARCHAR( 255 ) NOT NULL DEFAULT '' AFTER `filesize`; ALTER TABLE `web_domain` ALTER pm SET DEFAULT 'ondemand'; ALTER TABLE `web_domain` DROP COLUMN `enable_spdy`; ALTER TABLE `web_domain` ADD `folder_directive_snippets` TEXT NULL AFTER `https_port`; ALTER TABLE `web_domain` ADD `server_php_id` INT(11) UNSIGNED NOT NULL DEFAULT 0; ALTER TABLE `web_domain` CHANGE `apache_directives` `apache_directives` mediumtext NULL DEFAULT NULL; ALTER TABLE `web_domain` CHANGE `nginx_directives` `nginx_directives` mediumtext NULL DEFAULT NULL; UPDATE `web_domain` as w LEFT JOIN sys_group as g ON (g.groupid = w.sys_groupid) INNER JOIN `server_php` as p ON (w.fastcgi_php_version = CONCAT(p.name, ':', p.php_fastcgi_binary, ':', p.php_fastcgi_ini_dir) AND p.server_id IN (0, w.server_id) AND p.client_id IN (0, g.client_id)) SET w.server_php_id = p.server_php_id, w.fastcgi_php_version = '' WHERE w.server_php_id = 0; UPDATE `web_domain` as w LEFT JOIN sys_group as g ON (g.groupid = w.sys_groupid) INNER JOIN `server_php` as p ON (w.fastcgi_php_version = CONCAT(p.name, ':', p.php_fpm_init_script, ':', p.php_fpm_ini_dir, ':', p.php_fpm_pool_dir) AND p.server_id IN (0, w.server_id) AND p.client_id IN (0, g.client_id)) SET w.server_php_id = p.server_php_id, w.fastcgi_php_version = '' WHERE w.server_php_id = 0; ALTER TABLE `mail_user` ADD `forward_in_lda` enum('n','y') NOT NULL default 'n' AFTER `cc`; -- end of fixesispconfig3_install/install/sql/incremental/upd_0057.sql0000775000000000000000000000037615114346020022107 0ustar rootrootCREATE TABLE IF NOT EXISTS `sys_cron` ( `name` varchar(50) NOT NULL, `last_run` datetime NULL DEFAULT NULL, `next_run` datetime NULL DEFAULT NULL, `running` tinyint(1) UNSIGNED NOT NULL DEFAULT '0', PRIMARY KEY (`name`) ) DEFAULT CHARSET=utf8; ispconfig3_install/install/sql/incremental/upd_0043.sql0000775000000000000000000000055015114346020022074 0ustar rootrootALTER TABLE `sys_theme` ADD `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', ADD `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', ADD `sys_perm_user` varchar(5) DEFAULT NULL, ADD `sys_perm_group` varchar(5) DEFAULT NULL, ADD `sys_perm_other` varchar(5) DEFAULT NULL; ispconfig3_install/install/sql/incremental/upd_0071.sql0000775000000000000000000000050415114346020022074 0ustar rootrootALTER TABLE `client` ADD `limit_database_quota` int(11) NOT NULL default '-1' AFTER `limit_database`; ALTER TABLE `client_template` ADD `limit_database_quota` int(11) NOT NULL default '-1' AFTER `limit_database`; ALTER TABLE `web_database` ADD `database_quota` int(11) unsigned DEFAULT NULL AFTER `database_name_prefix`; ispconfig3_install/install/sql/incremental/upd_0101.sql0000775000000000000000000000273115114346020022072 0ustar rootrootALTER TABLE `web_database_user` ADD `database_password_sha2` varchar(70) DEFAULT NULL AFTER `database_password`; ALTER TABLE `web_database_user` ADD `database_password_postgres` varchar(255) DEFAULT NULL AFTER `database_password_mongo`; ALTER TABLE `client` ADD `limit_database_postgresql` INT NOT NULL DEFAULT '-1' AFTER `limit_database`; ALTER TABLE `client_template` ADD `limit_database_postgresql` INT NOT NULL DEFAULT '-1' AFTER `limit_database`; ALTER TABLE `server_php` ADD `php_cli_binary` varchar(255) DEFAULT NULL AFTER `php_fpm_socket_dir`; ALTER TABLE `server_php` ADD `php_jk_section` varchar(255) DEFAULT NULL AFTER `php_cli_binary`; ALTER TABLE `mail_domain` ADD `local_delivery` enum('n','y') NOT NULL DEFAULT 'y' AFTER `active`; ALTER TABLE `sys_remoteaction` CHANGE `action_type` `action_type` VARCHAR(64) NOT NULL; CREATE TABLE IF NOT EXISTS `sys_message` ( `message_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT 0, `sys_groupid` int(11) unsigned NOT NULL DEFAULT 0, `sys_perm_user` VARCHAR(5) DEFAULT 'r', `sys_perm_group` VARCHAR(5) DEFAULT 'r', `sys_perm_other` VARCHAR(5) DEFAULT '', `message_state` enum('info','warning','error') NOT NULL DEFAULT 'info', `message_date` datetime NULL DEFAULT NULL, `message_ack` enum('y','n') NOT NULL DEFAULT 'n', `relation` varchar(255) NULL DEFAULT NULL, `message` TEXT DEFAULT NULL, PRIMARY KEY (`message_id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8 AUTO_INCREMENT=1; ispconfig3_install/install/sql/incremental/upd_0023.sql0000775000000000000000000000020415114346020022066 0ustar rootrootALTER TABLE `sys_session` CHANGE `session_id` `session_id` VARCHAR( 64 ) CHARACTER SET latin1 COLLATE latin1_swedish_ci NOT NULL;ispconfig3_install/install/sql/incremental/upd_0050.sql0000775000000000000000000000145415114346020022076 0ustar rootrootCREATE TABLE IF NOT EXISTS `dns_slave` ( `id` int(10) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL default '1', `origin` varchar(255) NOT NULL DEFAULT '', `ns` varchar(255) NOT NULL DEFAULT '', `active` enum('N','Y') NOT NULL DEFAULT 'N', `xfer` varchar(255) NOT NULL DEFAULT '', PRIMARY KEY (`id`), KEY `origin` (`origin`), KEY `active` (`active`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `dns_slave` DROP INDEX `origin`; ALTER TABLE `dns_slave` ADD CONSTRAINT `slave` UNIQUE (`origin`,`server_id`);ispconfig3_install/install/sql/incremental/upd_0030.sql0000775000000000000000000000062515114346020022073 0ustar rootrootALTER TABLE `client` ADD `bank_account_number` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `notes` , ADD `bank_code` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `bank_account_number` , ADD `bank_name` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `bank_code` , ADD `bank_account_iban` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `bank_name` , ADD `bank_account_swift` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `bank_account_iban`;ispconfig3_install/install/sql/incremental/upd_0035.sql0000775000000000000000000000171415114346020022100 0ustar rootroot-- -------------------------------------------------------- -- -- Table structure for table `sys_theme` -- CREATE TABLE IF NOT EXISTS `sys_theme` ( `var_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `tpl_name` varchar(32) NOT NULL, `username` varchar(64) NOT NULL, `logo_url` varchar(255) NOT NULL, PRIMARY KEY (`var_id`) ) DEFAULT CHARSET=utf8 ; -- -------------------------------------------------------- INSERT INTO `sys_theme` (`var_id`, `tpl_name`, `username`, `logo_url`) VALUES (NULL, 'default', 'global', 'themes/default/images/header_logo.png'); INSERT INTO `sys_theme` (`var_id`, `tpl_name`, `username`, `logo_url`) VALUES (NULL, 'default-v2', 'global', 'themes/default-v2/images/header_logo.png'); -- -------------------------------------------------------- ALTER TABLE `web_domain` ADD `ssl_key` MEDIUMTEXT NOT NULL AFTER `ssl_bundle`; ALTER TABLE `mail_user` ADD `disabledoveadm` enum('n','y') NOT NULL default 'n' AFTER `disablelda`; ispconfig3_install/install/sql/incremental/upd_0002.sql0000775000000000000000000000050115114346020022063 0ustar rootrootCREATE TABLE IF NOT EXISTS `sys_session` ( `session_id` varchar(32) NOT NULL default '', `date_created` datetime NOT NULL default '0000-00-00 00:00:00', `last_updated` datetime NOT NULL default '0000-00-00 00:00:00', `session_data` longtext, PRIMARY KEY (`session_id`), KEY `last_updated` (`last_updated`) );ispconfig3_install/install/sql/incremental/upd_0013.sql0000775000000000000000000000140615114346020022072 0ustar rootroot-- -- Table structure for table `iptables` -- DROP TABLE IF EXISTS `iptables`; CREATE TABLE `iptables` ( `iptables_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL DEFAULT '0', `table` varchar(10) DEFAULT NULL COMMENT 'INPUT OUTPUT FORWARD', `source_ip` varchar(16) DEFAULT NULL, `destination_ip` varchar(16) DEFAULT NULL, `protocol` varchar(10) DEFAULT 'TCP' COMMENT 'TCP UDP GRE', `singleport` varchar(10) DEFAULT NULL, `multiport` varchar(40) DEFAULT NULL, `state` varchar(20) DEFAULT NULL COMMENT 'NEW ESTABLISHED RECNET etc', `target` varchar(10) DEFAULT NULL COMMENT 'ACCEPT DROP REJECT LOG', `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`iptables_id`) ) AUTO_INCREMENT=5 DEFAULT CHARSET=utf8; ispconfig3_install/install/sql/incremental/upd_0052.sql0000775000000000000000000000016315114346020022074 0ustar rootrootALTER TABLE `client` ADD `default_slave_dnsserver` INT( 11 ) UNSIGNED NOT NULL DEFAULT '1' AFTER `limit_dns_zone`; ispconfig3_install/install/sql/incremental/upd_0027.sql0000775000000000000000000000021315114346020022072 0ustar rootrootALTER TABLE `mail_user` ADD `autoresponder_subject` VARCHAR(255) NOT NULL DEFAULT 'Out of office reply' AFTER `autoresponder_end_date`; ispconfig3_install/install/sql/incremental/upd_0042.sql0000775000000000000000000000016115114346020022071 0ustar rootroot -- increase column size ALTER TABLE `client` CHANGE `template_additional` `template_additional` TEXT NOT NULL; ispconfig3_install/install/sql/incremental/upd_0064.sql0000775000000000000000000000035115114346020022076 0ustar rootrootALTER TABLE `mail_user` ADD `disablelmtp` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `disablelda` ; ALTER TABLE `mail_user` CHANGE `uid` `uid` INT( 11 ) NOT NULL DEFAULT '5000', CHANGE `gid` `gid` INT( 11 ) NOT NULL DEFAULT '5000' ;ispconfig3_install/install/sql/incremental/upd_0092.sql0000775000000000000000000000061115114346020022076 0ustar rootroot-- drop old php column because new installations don't have them (fails in multi-server) ALTER TABLE `web_domain` DROP COLUMN `fastcgi_php_version`; -- add php_fpm_socket_dir column to server_php ALTER TABLE `server_php` ADD `php_fpm_socket_dir` varchar(255) DEFAULT NULL AFTER `php_fpm_pool_dir`; -- fix #5939 UPDATE `ftp_user` SET `expires` = NULL WHERE `expires` = '0000-00-00 00:00:00'; ispconfig3_install/install/sql/incremental/upd_0055.sql0000775000000000000000000000010415114346020022072 0ustar rootrootALTER TABLE `sys_datalog` ADD `error` MEDIUMTEXT NULL DEFAULT NULL; ispconfig3_install/install/sql/incremental/upd_0016.sql0000775000000000000000000000072315114346020022076 0ustar rootrootALTER TABLE `server_ip` ADD `ip_type` enum( 'IPv4', 'IPv6' ) NOT NULL DEFAULT 'IPv4' AFTER `server_id`; ALTER TABLE `server_ip` ADD `virtualhost_port` VARCHAR( 255 ) NOT NULL DEFAULT '80,443'; ALTER TABLE `server_ip` ADD `client_id` int(11) unsigned NOT NULL default '0' AFTER `server_id`; ALTER TABLE `mail_user` ADD `disablesieve` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n'; ALTER TABLE `mail_user` ADD `disablelda` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n';ispconfig3_install/install/sql/incremental/upd_0037.sql0000775000000000000000000000357515114346020022111 0ustar rootroot-- -------------------------------------------------------- ALTER TABLE `client` ADD `limit_cgi` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `web_php_options`, ADD `limit_ssi` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_cgi`, ADD `limit_perl` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_ssi`, ADD `limit_ruby` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_perl`, ADD `limit_python` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_ruby`, ADD `force_suexec` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_python`, ADD `limit_hterror` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `force_suexec`, ADD `limit_wildcard` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_hterror`, ADD `limit_ssl` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_wildcard`; ALTER TABLE `client_template` ADD `limit_cgi` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `web_php_options`, ADD `limit_ssi` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_cgi`, ADD `limit_perl` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_ssi`, ADD `limit_ruby` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_perl`, ADD `limit_python` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_ruby`, ADD `force_suexec` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_python`, ADD `limit_hterror` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `force_suexec`, ADD `limit_wildcard` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_hterror`, ADD `limit_ssl` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_wildcard`; ispconfig3_install/install/sql/incremental/upd_0028.sql0000775000000000000000000000126715114346020022105 0ustar rootrootALTER TABLE `web_database` ADD `parent_domain_id` int(11) unsigned NOT NULL DEFAULT '0' AFTER `server_id`; ALTER TABLE `web_database` ADD `backup_interval` VARCHAR( 255 ) NOT NULL DEFAULT 'none', ADD `backup_copies` INT NOT NULL DEFAULT '1' AFTER `remote_ips`; CREATE TABLE `web_backup` ( `backup_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL, `parent_domain_id` int(10) unsigned NOT NULL, `backup_type` enum('web','mysql') NOT NULL DEFAULT 'web', `backup_mode` varchar(64) NOT NULL DEFAULT '', `tstamp` int(10) unsigned NOT NULL, `filename` varchar(255) NOT NULL, PRIMARY KEY (`backup_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ispconfig3_install/install/sql/incremental/upd_0054.sql0000775000000000000000000000011315114346020022071 0ustar rootrootALTER TABLE `web_domain` ADD `rewrite_rules` MEDIUMTEXT NULL DEFAULT NULL; ispconfig3_install/install/sql/incremental/upd_0053.sql0000775000000000000000000000023515114346020022075 0ustar rootrootALTER TABLE `web_domain` ADD `last_quota_notification` DATE NULL DEFAULT NULL; ALTER TABLE `mail_user` ADD `last_quota_notification` DATE NULL DEFAULT NULL; ispconfig3_install/install/sql/incremental/upd_0070.sql0000775000000000000000000000015615114346020022076 0ustar rootrootALTER TABLE `mail_user` ADD `disablesieve-filter` ENUM( 'y', 'n' ) NOT NULL DEFAULT 'n' AFTER `disablesieve`; ispconfig3_install/install/sql/incremental/upd_0080.sql0000775000000000000000000000015315114346020022074 0ustar rootrootALTER TABLE `web_domain` ADD COLUMN `enable_spdy` ENUM('y','n') NULL DEFAULT 'n' AFTER `proxy_directives`; ispconfig3_install/install/sql/incremental/upd_0026.sql0000775000000000000000000000015515114346020022076 0ustar rootrootALTER TABLE `shell_user` CHANGE `ssh_rsa` `ssh_rsa` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL;ispconfig3_install/install/sql/incremental/upd_0038.sql0000775000000000000000000000023515114346020022100 0ustar rootroot-- -------------------------------------------------------- ALTER TABLE `web_domain` ADD `web_folder` VARCHAR( 100 ) DEFAULT NULL AFTER `document_root` ; ispconfig3_install/install/sql/incremental/upd_0079.sql0000775000000000000000000000031015114346020022077 0ustar rootrootALTER TABLE `directive_snippets` ADD `customer_viewable` ENUM('n','y') NOT NULL DEFAULT 'n' AFTER `snippet`; ALTER TABLE `web_domain` ADD `directive_snippets_id` int(11) unsigned NOT NULL default '0';ispconfig3_install/install/sql/incremental/upd_0047.sql0000775000000000000000000000025715114346020022104 0ustar rootrootALTER TABLE `client` CHANGE `web_php_options` `web_php_options` VARCHAR( 255 ) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'no,fast-cgi,cgi,mod,suphp,php-fpm';ispconfig3_install/install/sql/incremental/upd_0084.sql0000775000000000000000000000031215114346020022075 0ustar rootrootUPDATE `sys_user` SET `app_theme` = 'default' WHERE 1; ALTER TABLE `ftp_user` ADD `user_type` SET('user','system') NOT NULL DEFAULT 'user' AFTER `expires`, ADD `user_config` TEXT NULL AFTER `user_type`;ispconfig3_install/install/sql/incremental/upd_0090.sql0000775000000000000000000000064615114346020022104 0ustar rootrootALTER TABLE `web_domain` ADD `jailkit_chroot_app_sections` mediumtext NULL DEFAULT NULL; ALTER TABLE `web_domain` ADD `jailkit_chroot_app_programs` mediumtext NULL DEFAULT NULL; ALTER TABLE `web_domain` ADD `delete_unused_jailkit` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `web_domain` ADD `last_jailkit_update` date NULL DEFAULT NULL; ALTER TABLE `web_domain` ADD `last_jailkit_hash` varchar(255) DEFAULT NULL;ispconfig3_install/install/sql/incremental/upd_0072.sql0000775000000000000000000000276615114346020022111 0ustar rootrootALTER TABLE `country` ADD `eu` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'BE'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'BG'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'DK'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'DE'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'EE'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'FI'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'FR'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'GR'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'IE'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'IT'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'HR'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'LV'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'LT'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'LU'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'MT'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'NL'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'AT'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'PL'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'PT'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'RO'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'SE'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'SK'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'SI'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'ES'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'CZ'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'HU'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'GB'; UPDATE `country` SET `eu` = 'y' WHERE `iso` = 'CY'; ispconfig3_install/install/sql/incremental/upd_0000.sql0000775000000000000000000000034415114346020022066 0ustar rootroot-- ----------------------------------------------------------- -- Dummy patch file -- Do not edit this file -- See README.txt in sql folder for detailed instructions -- -----------------------------------------------------------ispconfig3_install/install/sql/incremental/upd_0078.sql0000775000000000000000000000026315114346020022105 0ustar rootrootALTER TABLE `dns_rr` CHANGE `data` `data` TEXT NOT NULL; ALTER TABLE `web_domain` DROP INDEX `serverdomain`, ADD UNIQUE `serverdomain` ( `server_id` , `ip_address`, `domain` ); ispconfig3_install/install/sql/incremental/upd_0104.sql0000775000000000000000000000043515152623272022105 0ustar rootroot-- Add disablereplicator column to mail_user if not existing, and ensure correct type ALTER TABLE `mail_user` ADD COLUMN IF NOT EXISTS `disablereplicator` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `mail_user` MODIFY COLUMN `disablereplicator` enum('n','y') NOT NULL DEFAULT 'n'; ispconfig3_install/install/sql/incremental/upd_0011.sql0000775000000000000000000000011515114346020022064 0ustar rootroot-- use text for groups ALTER TABLE `sys_user` CHANGE `groups` `groups` TEXT; ispconfig3_install/install/sql/incremental/upd_0089.sql0000775000000000000000000001143215114346020022107 0ustar rootroot-- add new proxy_protocol column ALTER TABLE `web_domain` ADD COLUMN `proxy_protocol` ENUM('n','y') NOT NULL DEFAULT 'n' AFTER `log_retention`; -- backup format ALTER TABLE `web_domain` ADD `backup_format_web` VARCHAR( 255 ) NOT NULL default 'default' AFTER `backup_copies`; ALTER TABLE `web_domain` ADD `backup_format_db` VARCHAR( 255 ) NOT NULL default 'gzip' AFTER `backup_format_web`; -- end of backup format -- backup encryption ALTER TABLE `web_domain` ADD `backup_encrypt` enum('n','y') NOT NULL DEFAULT 'n' AFTER `backup_format_db`; ALTER TABLE `web_domain` ADD `backup_password` VARCHAR( 255 ) NOT NULL DEFAULT '' AFTER `backup_encrypt`; ALTER TABLE `web_backup` ADD `backup_format` VARCHAR( 64 ) NOT NULL DEFAULT '' AFTER `backup_mode`; ALTER TABLE `web_backup` ADD `backup_password` VARCHAR( 255 ) NOT NULL DEFAULT '' AFTER `filesize`; -- end of backup encryption -- rename Comodo to "Sectigo / Comodo CA" UPDATE `dns_ssl_ca` SET `ca_name` = 'Sectigo / Comodo CA' WHERE `ca_issue` = 'comodoca.com'; -- default php-fpm to ondemand mode ALTER TABLE `web_domain` ALTER pm SET DEFAULT 'ondemand'; ALTER TABLE `mail_user` ADD `purge_trash_days` INT NOT NULL DEFAULT '0' AFTER `move_junk`, ADD `purge_junk_days` INT NOT NULL DEFAULT '0' AFTER `purge_trash_days`; -- doveadm should be enabled for all mailboxes UPDATE `mail_user` set `disabledoveadm` = 'n'; -- add disablequota-status for quota-status policy daemon ALTER TABLE `mail_user` ADD `disablequota-status` ENUM('n','y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'n' AFTER `disabledoveadm`; -- add disableindexer-worker for solr search ALTER TABLE `mail_user` ADD `disableindexer-worker` ENUM('n','y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'n' AFTER `disablequota-status`; -- add SSHFP and DNAME record ALTER TABLE `dns_rr` CHANGE `type` `type` ENUM('A','AAAA','ALIAS','CNAME','DNAME','CAA','DS','HINFO','LOC','MX','NAPTR','NS','PTR','RP','SRV','SSHFP','TXT','TLSA','DNSKEY') NULL DEFAULT NULL AFTER `name`; -- change cc and sender_cc column type ALTER TABLE `mail_user` CHANGE `cc` `cc` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci; -- remove SPDY option ALTER TABLE `web_domain` DROP COLUMN `enable_spdy`; -- was missing in incremental, inserted for fixing older installations ALTER TABLE `web_domain` ADD `folder_directive_snippets` TEXT NULL AFTER `https_port`; ALTER TABLE `web_domain` ADD `server_php_id` INT(11) UNSIGNED NOT NULL DEFAULT 0; UPDATE `web_domain` as w LEFT JOIN sys_group as g ON (g.groupid = w.sys_groupid) INNER JOIN `server_php` as p ON (w.fastcgi_php_version = CONCAT(p.name, ':', p.php_fastcgi_binary, ':', p.php_fastcgi_ini_dir) AND p.server_id IN (0, w.server_id) AND p.client_id IN (0, g.client_id)) SET w.server_php_id = p.server_php_id, w.fastcgi_php_version = '' WHERE 1; UPDATE `web_domain` as w LEFT JOIN sys_group as g ON (g.groupid = w.sys_groupid) INNER JOIN `server_php` as p ON (w.fastcgi_php_version = CONCAT(p.name, ':', p.php_fpm_init_script, ':', p.php_fpm_ini_dir, ':', p.php_fpm_pool_dir) AND p.server_id IN (0, w.server_id) AND p.client_id IN (0, g.client_id)) SET w.server_php_id = p.server_php_id, w.fastcgi_php_version = '' WHERE 1; ALTER TABLE `web_domain` CHANGE `apache_directives` `apache_directives` mediumtext NULL DEFAULT NULL; ALTER TABLE `web_domain` CHANGE `nginx_directives` `nginx_directives` mediumtext NULL DEFAULT NULL; -- add move to junk before/after option, default to after ALTER TABLE `mail_user` MODIFY `move_junk` enum('y','a','n') NOT NULL DEFAULT 'y'; -- Change id_rsa column to TEXT format ALTER TABLE `client` CHANGE `id_rsa` `id_rsa` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci; ALTER TABLE `directive_snippets` ADD `update_sites` ENUM('y','n') NOT NULL DEFAULT 'n' ; -- Add DNSSEC Algorithm setting ALTER TABLE `dns_soa` ADD `dnssec_algo` SET('NSEC3RSASHA1','ECDSAP256SHA256') NULL DEFAULT NULL AFTER `dnssec_wanted`; UPDATE `dns_soa` SET `dnssec_algo` = 'NSEC3RSASHA1' WHERE `dnssec_algo` IS NULL AND dnssec_initialized = 'Y'; UPDATE `dns_soa` SET `dnssec_algo` = 'ECDSAP256SHA256' WHERE `dnssec_algo` IS NULL AND dnssec_initialized = 'N'; ALTER TABLE `dns_soa` CHANGE `dnssec_algo` `dnssec_algo` SET('NSEC3RSASHA1','ECDSAP256SHA256') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'ECDSAP256SHA256'; -- Fix issue #5635 ALTER TABLE `client_template` CHANGE `ssh_chroot` `ssh_chroot` VARCHAR(255) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT ''; ALTER TABLE `client_template` CHANGE `web_php_options` `web_php_options` VARCHAR(255) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT ''; -- add option to forward in lda, default to forward in mta except for existing forwards ALTER TABLE `mail_user` ADD `forward_in_lda` enum('n','y') NOT NULL default 'n' AFTER `cc`; UPDATE `mail_user` set `forward_in_lda` = 'y' where `cc` != '';ispconfig3_install/install/sql/incremental/upd_0020.sql0000775000000000000000000000030315114346020022063 0ustar rootrootALTER TABLE `web_domain` ADD `seo_redirect` VARCHAR( 255 ) default NULL AFTER `redirect_path`; ALTER TABLE `web_folder_user` ADD `server_id` INT( 11 ) NOT NULL DEFAULT '0' AFTER `sys_perm_other`;ispconfig3_install/install/sql/incremental/upd_0060.sql0000775000000000000000000000125215114346020022073 0ustar rootrootALTER TABLE `client` ADD `customer_no_template` VARCHAR( 255 ) NULL DEFAULT 'C[CUSTOMER_NO]' AFTER `ssh_rsa` , ADD `customer_no_start` INT NOT NULL DEFAULT '1' AFTER `customer_no_template` , ADD `customer_no_counter` INT NOT NULL DEFAULT '0' AFTER `customer_no_start` , ADD `added_date` DATE NOT NULL default '0000-00-00' AFTER `customer_no_counter` , ADD `added_by` VARCHAR( 255 ) NULL AFTER `added_date` ; ALTER TABLE `web_domain` ADD `added_date` DATE NOT NULL default '0000-00-00' AFTER `rewrite_rules` , ADD `added_by` VARCHAR( 255 ) NULL AFTER `added_date` ; ALTER TABLE `sys_session` ADD `permanent` ENUM('n','y') NOT NULL DEFAULT 'n' AFTER `last_updated`;ispconfig3_install/install/sql/incremental/upd_0005.sql0000775000000000000000000000006715114346020022075 0ustar rootrootALTER TABLE client ADD COLUMN company_id varchar(30); ispconfig3_install/install/sql/incremental/upd_0097.sql0000775000000000000000000000044115114346020022104 0ustar rootrootALTER TABLE `sys_user` ADD `otp_type` SET('none', 'email') NOT NULL DEFAULT 'none' AFTER `lost_password_reqtime`, ADD `otp_data` VARCHAR(255) NULL AFTER `otp_type`, ADD `otp_recovery` VARCHAR(64) NULL AFTER `otp_data`, ADD `otp_attempts` TINYINT NOT NULL DEFAULT '0' AFTER `otp_recovery`; ispconfig3_install/install/sql/incremental/upd_0001.sql0000775000000000000000000000013315114346020022063 0ustar rootrootALTER TABLE `web_domain` ADD `document_root_www` VARCHAR( 255 ) NULL AFTER `document_root`;ispconfig3_install/install/sql/incremental/upd_0086.sql0000775000000000000000000000075415114346020022111 0ustar rootrootALTER TABLE `web_domain` ADD COLUMN `ssl_letsencrypt_exclude` enum('n','y') NOT NULL DEFAULT 'n' AFTER `ssl_letsencrypt`; ALTER TABLE `remote_user` ADD `remote_access` ENUM('y','n') NOT NULL DEFAULT 'y' AFTER `remote_password`; ALTER TABLE `remote_user` ADD `remote_ips` TEXT AFTER `remote_access`; ALTER TABLE `server_php` ADD `active` enum('y','n') NOT NULL DEFAULT 'y' AFTER `php_fpm_pool_dir`; ALTER TABLE `web_domain` CHANGE `log_retention` `log_retention` INT(11) NOT NULL DEFAULT '10';ispconfig3_install/install/sql/incremental/upd_0004.sql0000775000000000000000000000213315114346020022070 0ustar rootroot-- -------------------------------------------------------- -- tables for the FAQ module CREATE TABLE `help_faq_sections` ( `hfs_id` int(11) NOT NULL AUTO_INCREMENT, `hfs_name` varchar(255) DEFAULT NULL, `hfs_order` int(11) DEFAULT '0', `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hfs_id`) ) AUTO_INCREMENT=1; INSERT INTO `help_faq_sections` VALUES (1,'General',0,NULL,NULL,NULL,NULL,NULL); CREATE TABLE `help_faq` ( `hf_id` int(11) NOT NULL AUTO_INCREMENT, `hf_section` int(11) DEFAULT NULL, `hf_order` int(11) DEFAULT '0', `hf_question` text, `hf_answer` text, `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hf_id`) ) AUTO_INCREMENT=1; INSERT INTO `help_faq` VALUES (1,1,0,'I\'d like to know ...','Yes, of course.',1,1,'riud','riud','r'); ispconfig3_install/install/sql/incremental/upd_0067.sql0000775000000000000000000000066615114346020022112 0ustar rootrootALTER TABLE `client` ADD `web_servers` blob NOT NULL AFTER `default_webserver`, ADD `mail_servers` blob NOT NULL AFTER `default_mailserver`, ADD `db_servers` blob NOT NULL AFTER `default_dbserver`, ADD `dns_servers` blob NOT NULL AFTER `default_dnsserver`; UPDATE `client` SET `web_servers` = `default_webserver`, `mail_servers` = `default_mailserver`, `db_servers` = `default_dbserver`, `dns_servers` = `default_dnsserver` WHERE 1; ispconfig3_install/install/sql/incremental/upd_0085.sql0000775000000000000000000000557715114346020022120 0ustar rootroot-- folder_directive_snippets was missing in incremental, inserted for fixing older installations ALTER TABLE `web_domain` ADD `folder_directive_snippets` TEXT NULL AFTER `https_port`; ALTER TABLE `web_domain` CHANGE `folder_directive_snippets` `folder_directive_snippets` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NULL; ALTER TABLE `web_domain` ADD `log_retention` INT NOT NULL DEFAULT '30' AFTER `https_port`; ALTER TABLE `web_domain` CHANGE `stats_type` `stats_type` VARCHAR(255) CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT 'awstats'; ALTER TABLE `spamfilter_policy` CHANGE `virus_lover` `virus_lover` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `spam_lover` `spam_lover` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `banned_files_lover` `banned_files_lover` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `bad_header_lover` `bad_header_lover` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `bypass_virus_checks` `bypass_virus_checks` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `bypass_spam_checks` `bypass_spam_checks` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `bypass_banned_checks` `bypass_banned_checks` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `bypass_header_checks` `bypass_header_checks` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `spam_modifies_subj` `spam_modifies_subj` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `warnvirusrecip` `warnvirusrecip` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `warnbannedrecip` `warnbannedrecip` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N', CHANGE `warnbadhrecip` `warnbadhrecip` ENUM('N','Y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'N'; ALTER TABLE `dns_rr` CHANGE `data` `data` TEXT NOT NULL; ALTER TABLE `web_database` CHANGE `database_quota` `database_quota` INT(11) NULL DEFAULT NULL; ALTER TABLE `web_domain` ADD `log_retention` INT NOT NULL DEFAULT '30' ; ALTER TABLE spamfilter_policy CHANGE spam_tag_level spam_tag_level DECIMAL(5,2) NULL DEFAULT NULL, CHANGE spam_tag2_level spam_tag2_level DECIMAL(5,2) NULL DEFAULT NULL, CHANGE spam_kill_level spam_kill_level DECIMAL(5,2) NULL DEFAULT NULL, CHANGE spam_dsn_cutoff_level spam_dsn_cutoff_level DECIMAL(5,2) NULL DEFAULT NULL, CHANGE spam_quarantine_cutoff_level spam_quarantine_cutoff_level DECIMAL(5,2) NULL DEFAULT NULL; UPDATE `web_database` as d LEFT JOIN `web_domain` as w ON (w.domain_id = d.parent_domain_id) SET d.parent_domain_id = 0 WHERE w.domain_id IS NULL AND d.parent_domain_id != 0 AND (SELECT EXISTS(SELECT * FROM web_domain)); ispconfig3_install/install/sql/incremental/upd_0033.sql0000775000000000000000000000100315114346020022065 0ustar rootrootCREATE TABLE IF NOT EXISTS `client_circle` ( `circle_id` int(11) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `circle_name` varchar(64) DEFAULT NULL, `client_ids` text, `description` text, `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`circle_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ;ispconfig3_install/install/sql/incremental/upd_0081.sql0000775000000000000000000003751015114346020022104 0ustar rootrootALTER TABLE `mail_user` CHANGE `uid` `uid` int(11) NOT NULL DEFAULT '5000', CHANGE `gid` `gid` int(11) NOT NULL DEFAULT '5000'; ALTER TABLE `mail_user` ADD COLUMN `sender_cc` varchar(255) NOT NULL DEFAULT '' AFTER `cc`; ALTER TABLE `client_template` ADD `default_mailserver` INT(11) NOT NULL DEFAULT 1; ALTER TABLE `client_template` ADD `default_webserver` INT(11) NOT NULL DEFAULT 1; ALTER TABLE `client_template` ADD `default_dnsserver` INT(11) NOT NULL DEFAULT 1; ALTER TABLE `client_template` ADD `default_slave_dnsserver` INT(11) NOT NULL DEFAULT 1; ALTER TABLE `client_template` ADD `default_dbserver` INT(11) NOT NULL DEFAULT 1; ALTER TABLE `client_template` ADD COLUMN `default_xmppserver` int(11) unsigned NOT NULL DEFAULT '1', ADD COLUMN `xmpp_servers` blob, ADD COLUMN `limit_xmpp_domain` int(11) NOT NULL DEFAULT '-1', ADD COLUMN `limit_xmpp_user` int(11) NOT NULL DEFAULT '-1', ADD COLUMN `limit_xmpp_muc` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_anon` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_vjud` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_proxy` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_status` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_pastebin` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_httparchive` ENUM( 'n', 'y' ) NOT NULL default 'n'; ALTER TABLE `client` ADD `contact_firstname` VARCHAR( 64 ) NOT NULL DEFAULT '' AFTER `gender`; UPDATE `dns_template` SET `fields` = 'DOMAIN,IP,NS1,NS2,EMAIL,DKIM,DNSSEC' WHERE `dns_template`.`template_id` =1; UPDATE `dns_template` SET `template` = '[ZONE] origin={DOMAIN}. ns={NS1}. mbox={EMAIL}. refresh=7200 retry=540 expire=604800 minimum=3600 ttl=3600 [DNS_RECORDS] A|{DOMAIN}.|{IP}|0|3600 A|www|{IP}|0|3600 A|mail|{IP}|0|3600 NS|{DOMAIN}.|{NS1}.|0|3600 NS|{DOMAIN}.|{NS2}.|0|3600 MX|{DOMAIN}.|mail.{DOMAIN}.|10|3600 TXT|{DOMAIN}.|v=spf1 mx a ~all|0|3600' WHERE `dns_template`.`template_id` = 1; ALTER TABLE `sys_user` ADD `lost_password_function` TINYINT(1) NOT NULL DEFAULT '1' ; ALTER TABLE `mail_backup` CHANGE `filesize` `filesize` VARCHAR(20) NOT NULL DEFAULT ''; ALTER TABLE `web_backup` CHANGE `filesize` `filesize` VARCHAR(20) NOT NULL DEFAULT ''; ALTER TABLE `sys_datalog` ADD INDEX `dbtable` (`dbtable` (25), `dbidx` (25)), ADD INDEX (`action`); ALTER TABLE `mail_user` ADD `greylisting` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `postfix`; ALTER TABLE `mail_user` ADD `maildir_format` varchar(255) NOT NULL default 'maildir' AFTER `maildir`; ALTER TABLE `mail_forwarding` ADD `greylisting` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `active`; ALTER TABLE `openvz_ip` CHANGE `ip_address` `ip_address` VARCHAR(39) DEFAULT NULL; -- XMPP Support ALTER TABLE `server` ADD COLUMN `xmpp_server` tinyint(1) NOT NULL default '0' AFTER `firewall_server`; ALTER TABLE `client` ADD COLUMN `default_xmppserver` int(11) unsigned NOT NULL DEFAULT '1', ADD COLUMN `xmpp_servers` blob, ADD COLUMN `limit_xmpp_domain` int(11) NOT NULL DEFAULT '-1', ADD COLUMN `limit_xmpp_user` int(11) NOT NULL DEFAULT '-1', ADD COLUMN `limit_xmpp_muc` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_anon` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_auth_options` varchar(255) NOT NULL DEFAULT 'plain,hashed,isp', ADD COLUMN `limit_xmpp_vjud` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_proxy` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_status` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_pastebin` ENUM( 'n', 'y' ) NOT NULL default 'n', ADD COLUMN `limit_xmpp_httparchive` ENUM( 'n', 'y' ) NOT NULL default 'n'; CREATE TABLE `xmpp_domain` ( `domain_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL default '', `management_method` ENUM( 'normal', 'maildomain' ) NOT NULL default 'normal', `public_registration` ENUM( 'n', 'y' ) NOT NULL default 'n', `registration_url` varchar(255) NOT NULL DEFAULT '', `registration_message` varchar(255) NOT NULL DEFAULT '', `domain_admins` text, `use_pubsub` enum('n','y') NOT NULL DEFAULT 'n', `use_proxy` enum('n','y') NOT NULL DEFAULT 'n', `use_anon_host` enum('n','y') NOT NULL DEFAULT 'n', `use_vjud` enum('n','y') NOT NULL DEFAULT 'n', `vjud_opt_mode` enum('in', 'out') NOT NULL DEFAULT 'in', `use_muc_host` enum('n','y') NOT NULL DEFAULT 'n', `muc_name` varchar(30) NOT NULL DEFAULT '', `muc_restrict_room_creation` enum('n', 'y', 'm') NOT NULL DEFAULT 'm', `muc_admins` text, `use_pastebin` enum('n','y') NOT NULL DEFAULT 'n', `pastebin_expire_after` int(3) NOT NULL DEFAULT 48, `pastebin_trigger` varchar(10) NOT NULL DEFAULT '!paste', `use_http_archive` enum('n','y') NOT NULL DEFAULT 'n', `http_archive_show_join` enum('n', 'y') NOT NULL DEFAULT 'n', `http_archive_show_status` enum('n', 'y') NOT NULL DEFAULT 'n', `use_status_host` enum('n','y') NOT NULL DEFAULT 'n', `ssl_state` varchar(255) NULL, `ssl_locality` varchar(255) NULL, `ssl_organisation` varchar(255) NULL, `ssl_organisation_unit` varchar(255) NULL, `ssl_country` varchar(255) NULL, `ssl_email` varchar(255) NULL, `ssl_request` mediumtext NULL, `ssl_cert` mediumtext NULL, `ssl_bundle` mediumtext NULL, `ssl_key` mediumtext NULL, `ssl_action` varchar(16) NULL, `active` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`domain_id`), KEY `server_id` (`server_id`,`domain`), KEY `domain_active` (`domain`,`active`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; -- -- Table structure for table `xmpp_user` -- CREATE TABLE `xmpp_user` ( `xmppuser_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `jid` varchar(255) NOT NULL default '', `password` varchar(255) NOT NULL default '', `active` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`xmppuser_id`), KEY `server_id` (`server_id`,`jid`), KEY `jid_active` (`jid`,`active`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- ALTER TABLE `sys_ini` ADD `default_logo` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL , ADD `custom_logo` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL ; UPDATE `sys_ini` SET `default_logo` = 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAMgAAABBCAYAAACU5+uOAAAItUlEQVR42u1dCWwVVRStUJZCK6HsFNAgWpaCJkKICZKApKUFhURQpEnZF4EEUJZYEEpBIamgkQpUQBZRW7YCBqQsggsQEAgKLbIGCYsSCNqyQ8D76h18Hd/MvJk/n/bXc5KT+TNz79vPzNv+/2FhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAe++s0akTsRZxMnE6cGkKcxkwhPofaBPwWRzxxB/EO8UGI8xhxEGoV8EscY8qBKFRcgdoFAhXHC+VUHAbHo5aBQASyrZwL5DoxEjUNeBXI9XIuEMEE1DTgVSA3FA3qIDEtBLnTQiBDUNOAV4EUKhpURojmZQQEAjwKgSwK0bykWQgEU74ABAKBABAIBOIJffoNrkRsS0whDiMO5uNw4gBiSxvfGOJrbDtMOgr2JNa18HmZmETsopnGp4h9xdF0TcQRb8NEPkawTzv2qaWIoybnZYRUBoJD+difGAuBlCy0qsRM4mfERcTFfGygsBUF/xFxE/EQ8RixwIbi/j7il8R3iE8qwuxAXMJxuuFiTvNMYleb/E0gXiI+cOBaISTJrzLxcw2/+8Q5pjjfNNkM0RDILLadpbimw+bsc4DPkxRpuqkZ1orisoBAiguuhkUhPSvZRBA3u6gsK94g9jDFP9aHcAV3EKNNYX8i3RcNJ4M4nTiROJCYykIzbGZKvouk68vYbyS/cUbz+RrJZpzkO5Sv3eajaJhRDvUwg21nKK4VcF5WKPgFH6PZZw/7dJXC6S6lczunfbIQLpeDkZ+lJcoCAikuvChioaLBtfD4JHPiXSFKKexBPoa9Wwr3ael6skMZDGO7K3z+uOSb5OA7mu2KiOGmPH3ADVh8/sohnDS2S1NcG+uiO/kd+8RL146YRWzj359tb0Eg+gIpsHkjFNrQqiF3DZJABDtyuCP5/FuNRlHN8Ofz9nx+XLNR3jR1c4w8TSFGSmnr4FEgU7wKhI51jAeTpv+/ZQGBOAuEu1d/Ku6LV35t9rdigkUjHuMgkHPEecQsxdjjUx4zHbMI+10OdzqfZ2o0iiqSfzgPfMXnzZqN6iTbJ5jytMTU0E97FEhaAAJ5kc/PuJjQOCoIgegJpKbUl5b5vGaBT+A+vOgn5/JYIdFBIOs1wo1kIZl93+P70/h8oUZYFXkmKInPU9h3m2YeT8lvRilPyyWbi3xt4iMWSDc+P4lp3uAIRDxdryjui6dmuujXcr91IDcMmaJv31WISfTrLeJXCUT3yb1a4Ztmalyu61MaZG/XtD9tapRGnpZKNp2lNNZ3KZARAQgk3untBYEEPgbJ92FsIAax34v1AQ2B5Go2BlW60n0QyCC/BWISdJ5LgewWU8k86DdTzMyNh0BKVyAzfB5I93YQyBGeTlW9lQbwIle2Rdgzy7BAxJT6Hb6X6EIgTrznRSCiHli02cwcPor1pbkQiL5AKvOA+ZZPAtkfxFms3j4IZHAwBGJaRPxdjH00BSImJRqKOlEwjtjUo0Dm2pWla4HMzsyqQIxSMKI8C8RkL9YXuhDf5gqcw4NweaZJiGkh8UeLwi+Utkb4KZCrYszkVSDiQRDMN4hkf5DvZ2gKZJyLPJgFkmAjEDEF3EYSWzPeklO8Q8CLQGKJhQquK+eDdLFNZBJxFLEf8XUXFTbcYv2kRhAEIq+vGNO88zTTKVaRzxPrSSvPW11O8yZqCiROSnMsX0sP0ixWops1Hfbx/AaJIz5QcFc5n+ZVNcbxmoWtEsBNB4EU8Tgk32Gv1wneEybeWG1N8RoNbplmOo2neiyxE3/eoun7G9t31hGIqXuzl8/HB0kgxhvhD03/KoEIpIWFQPLK+UJhkWpgKLZP8IKhajNhJg8A7yt8/5K6QoFM8z5mc68Ph3VWM6wTbN+a+AR/vqThV13KYyMXAgmXps9FnK8GSSA17KaXFf7R3gUyd8H/TiBss9fngfQehzfMpkDLgxcS73J4k1y85WrxtTtOjZPuVZA2O55RhLfUId5XpI2UHwZDIHxtp7HtRrVL25SfhWy7z7VAMuYvipszd0FJcfxzHspdrMctGnGcZNPTZ4F0VszqyPSlPHm8JG9f2SDtgF3Nq/rnJZssyXeUdP0CN64c9l/FDfGyZNNNkaeVGmnMM+Vdtd19los8/2e7Ow/E70lxiG7pRmkn8AaeULlcoo4sBDLfKvL0nLUxablfX0hfmfuQ01avI65fUQYEkupRIJHcAMwbDWNNdmLgupV4zeMO3stcIZ1M4aYo4vZt0oO7Locd0ndGTEQofN+QxiZ22+y7W+RpgUb66vOU7232SZXupZqvaYT3Dfu8ZLrejtc47mvkJ9FoVEWKBmW7dyc7ZXD1Nb2TH3JVn5Tqa3r1repzY6/gwWeqhUCGO/XjWSTmjYYVLOzFoP0Z/qJTks033brxrtjmxCbGtK4ivEqKuH2fNuc0tDatIYgna4yGbz2eeTL8WhJbic2aDnmqqpm2KlLeK5vWn0pc0wirGvtUtBkzNdPKDzWe24oGdZX4CzGfWCD4U93GBQdqNSw4Uiny8K9h4buOhlU2scq+Q1G1i233k63hFwBPEfcS04l1FGJoynbH+fgz8ZKFQJLDAMDjk/psCPzw20XxE6mmdLd24d8KNQ14FciUEPl1xHvEhlK6W2j65aOWgUAEUpV4NEREstyDQNqjloFARVKL/xukrAvkGjGC09zGwfYKsQdqF/BTKMnEJcTtxC3EPAU3iic5cRkfjc/ZFvZuuZm4gXjOouG35LQ2Yfutkq/4pfpN/E9TDVCjQGkJqQExho+CjYlRPseRiQE3EIriaMZTw4K3mOJv23J8jme23RsEAMqqQJrb9PnnEbPEVpUAuJD4Mf/PoCqeONQCUJYFElGKf7ojpnqjUQtAWRdJaf1t2w8ofSAUBNKulATSEaUPhIpIRj9icbyFUgdCTSRTeR0i2HwfpQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBnG392D9QU+JXhxAAAAAElFTkSuQmCC' WHERE `sys_ini`.`sysini_id` = 1; ALTER TABLE `directive_snippets` ADD `required_php_snippets` VARCHAR(255) NOT NULL DEFAULT '' AFTER `customer_viewable`; ALTER TABLE `dns_rr` CHANGE `ttl` `ttl` INT(11) UNSIGNED NOT NULL DEFAULT '3600'; ALTER TABLE `dns_soa` CHANGE `minimum` `minimum` INT(11) UNSIGNED NOT NULL DEFAULT '3600', CHANGE `ttl` `ttl` INT(11) UNSIGNED NOT NULL DEFAULT '3600'; ALTER TABLE `client` CHANGE `web_php_options` `web_php_options` VARCHAR(255) NOT NULL DEFAULT 'no,fast-cgi,cgi,mod,suphp,php-fpm,hhvm'; ALTER TABLE `web_domain` ADD COLUMN `enable_pagespeed` ENUM('y','n') NOT NULL DEFAULT 'n' AFTER `directive_snippets_id`; ALTER TABLE openvz_template ADD COLUMN `features` varchar(255) DEFAULT NULL AFTER `capability`; ALTER TABLE openvz_vm ADD COLUMN `features` TEXT DEFAULT NULL AFTER `capability`; ALTER TABLE openvz_template ADD COLUMN `iptables` varchar(255) DEFAULT NULL AFTER `features`; ALTER TABLE openvz_vm ADD COLUMN `iptables` TEXT DEFAULT NULL AFTER `features`; CREATE TABLE `server_ip_map` ( `server_ip_map_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `source_ip` varchar(15) DEFAULT NULL, `destination_ip` varchar(35) DEFAULT '', `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`server_ip_map_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `web_domain` ADD COLUMN `rewrite_to_https` ENUM('y','n') NOT NULL DEFAULT 'n' AFTER `seo_redirect`; ALTER TABLE openvz_ip ADD COLUMN `additional` VARCHAR(255) NOT NULL DEFAULT 'n'; ALTER TABLE openvz_template ADD COLUMN `custom` text; ALTER TABLE openvz_vm ADD COLUMN `bootorder` INT(11) NOT NULL DEFAULT '1' AFTER `start_boot`, ADD COLUMN `custom` text; ALTER TABLE `web_domain` ADD `ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n' AFTER `ssl`; ALTER TABLE `openvz_template` CHANGE `vmguarpages` `vmguarpages` varchar(255) DEFAULT '65536:unlimited'; ALTER TABLE `openvz_template` CHANGE `privvmpages` `privvmpages` varchar(255) DEFAULT '131072:139264'; CREATE TABLE `ftp_traffic` ( `hostname` varchar(255) NOT NULL, `traffic_date` date NOT NULL, `in_bytes` bigint(32) unsigned NOT NULL, `out_bytes` bigint(32) unsigned NOT NULL, UNIQUE KEY (`hostname`,`traffic_date`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `mail_forwarding` ADD COLUMN `allow_send_as` ENUM('n','y') NOT NULL DEFAULT 'n' AFTER `active`; UPDATE `mail_forwarding` SET `allow_send_as` = 'y' WHERE `type` = 'alias'; ALTER TABLE `dns_rr` CHANGE COLUMN `type` `type` ENUM('A','AAAA','ALIAS','CNAME','DS','HINFO','LOC','MX','NAPTR','NS','PTR','RP','SRV','TXT','TLSA','DNSKEY') NULL DEFAULT NULL AFTER `name`; ALTER TABLE `dns_soa` ADD COLUMN `dnssec_initialized` ENUM('Y','N') NOT NULL DEFAULT 'N', ADD COLUMN `dnssec_wanted` ENUM('Y','N') NOT NULL DEFAULT 'N', ADD COLUMN `dnssec_last_signed` BIGINT NOT NULL DEFAULT '0', ADD COLUMN `dnssec_info` TEXT NULL; ALTER TABLE `client` ADD COLUMN `limit_ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n' AFTER `limit_ssl`; ALTER TABLE `client_template` ADD COLUMN `limit_ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n' AFTER `limit_ssl`; ALTER TABLE `client` ADD COLUMN `limit_directive_snippets` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_backup`; ALTER TABLE `client_template` ADD COLUMN `limit_directive_snippets` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `limit_backup`; ALTER TABLE `sys_user` ADD COLUMN `lost_password_hash` VARCHAR(50) NOT NULL DEFAULT '', ADD COLUMN `lost_password_reqtime` DATETIME NULL default NULL; ALTER TABLE `web_database` ADD COLUMN `quota_exceeded` enum('n','y') NOT NULL DEFAULT 'n' AFTER `database_quota`; ALTER TABLE `client` ADD COLUMN `limit_database_user` int(11) NOT NULL DEFAULT '-1' after limit_database; ALTER TABLE `client_template` ADD COLUMN `limit_database_user` int(11) NOT NULL DEFAULT '-1' after limit_database; ALTER TABLE `client` CHANGE `customer_no_template` `customer_no_template` VARCHAR(255) NULL DEFAULT 'R[CLIENTID]C[CUSTOMER_NO]'; ALTER TABLE `client` CHANGE `added_date` `added_date` DATE NULL DEFAULT NULL; ALTER TABLE `ftp_user` CHANGE `expires` `expires` DATETIME NULL DEFAULT NULL; ALTER TABLE `mail_user` CHANGE `autoresponder_start_date` `autoresponder_start_date` DATETIME NULL DEFAULT NULL; ALTER TABLE `mail_user` CHANGE `autoresponder_end_date` `autoresponder_end_date` DATETIME NULL DEFAULT NULL; ALTER TABLE `openvz_traffic` CHANGE `traffic_date` `traffic_date` DATE NULL DEFAULT NULL; ALTER TABLE `openvz_vm` CHANGE `active_until_date` `active_until_date` DATE NULL DEFAULT NULL; ALTER TABLE `sys_session` CHANGE `date_created` `date_created` DATETIME NULL DEFAULT NULL; ALTER TABLE `sys_session` CHANGE `last_updated` `last_updated` DATETIME NULL DEFAULT NULL; ALTER TABLE `web_domain` CHANGE `added_date` `added_date` DATE NULL DEFAULT NULL; ALTER TABLE `web_traffic` CHANGE `traffic_date` `traffic_date` DATE NULL DEFAULT NULL; UPDATE `client` SET `added_date` = NULL WHERE `added_date` = '0000-00-00'; UPDATE `ftp_user` SET `expires` = NULL WHERE `expires` = '0000-00-00 00:00:00'; UPDATE `mail_user` SET `autoresponder_start_date` = NULL WHERE `autoresponder_start_date` = '0000-00-00 00:00:00'; UPDATE `mail_user` SET `autoresponder_end_date` = NULL WHERE `autoresponder_end_date` = '0000-00-00 00:00:00'; UPDATE `openvz_traffic` SET `traffic_date` = NULL WHERE `traffic_date` = '0000-00-00'; UPDATE `openvz_vm` SET `active_until_date` = NULL WHERE `active_until_date` = '0000-00-00'; UPDATE `sys_session` SET `date_created` = NULL WHERE `date_created` = '0000-00-00 00:00:00'; UPDATE `sys_session` SET `last_updated` = NULL WHERE `last_updated` = '0000-00-00 00:00:00'; UPDATE `web_domain` SET `added_date` = NULL WHERE `added_date` = '0000-00-00'; UPDATE `web_traffic` SET `traffic_date` = NULL WHERE `traffic_date` = '0000-00-00'; ALTER TABLE `web_domain` ADD `http_port` INT NOT NULL DEFAULT '80' , ADD `https_port` INT NOT NULL DEFAULT '443' ; ispconfig3_install/install/sql/incremental/upd_0058.sql0000775000000000000000000000033715114346020022105 0ustar rootrootALTER TABLE `client` ADD COLUMN `can_use_api` enum('n','y') NOT NULL DEFAULT 'n' AFTER `canceled`; ALTER TABLE `remote_session` ADD COLUMN `client_login` tinyint(1) unsigned NOT NULL default '0' AFTER `remote_functions`; ispconfig3_install/install/sql/incremental/upd_0062.sql0000775000000000000000000000113315114346020022073 0ustar rootrootCREATE TABLE `mail_backup` ( `backup_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL, `parent_domain_id` int(10) unsigned NOT NULL, `mailuser_id` int(10) unsigned NOT NULL, `backup_mode` varchar(64) NOT NULL DEFAULT '', `tstamp` int(10) unsigned NOT NULL, `filename` varchar(255) NOT NULL, `filesize` VARCHAR(10) NOT NULL, PRIMARY KEY (`backup_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `mail_user` ADD `backup_interval` VARCHAR( 255 ) NOT NULL DEFAULT 'none'; ALTER TABLE `mail_user` ADD `backup_copies` INT NOT NULL DEFAULT '1'; ispconfig3_install/install/sql/incremental/upd_0100.sql0000775000000000000000000000132315114346020022065 0ustar rootrootINSERT IGNORE INTO `dns_ssl_ca` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `active`, `ca_name`, `ca_issue`, `ca_wildcard`, `ca_iodef`, `ca_critical`) VALUES (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Amazon Trust Services', 'amazontrust.com', 'Y', '', 0); -- 5374-mail-last-accessed-frontend ALTER TABLE `mail_user` ADD `last_access` int(11) NULL DEFAULT NULL after `disabledoveadm`; ALTER TABLE `web_domain` ADD `disable_symlinknotowner` enum('n','y') NOT NULL default 'n' AFTER `last_jailkit_hash`; UPDATE `web_domain` SET `backup_format_web` = 'tar_gzip' WHERE `backup_format_web` = 'rar'; UPDATE `web_domain` SET `backup_format_db` = 'zip' WHERE `backup_format_db` = 'rar';ispconfig3_install/install/sql/incremental/upd_0019.sql0000775000000000000000000000421215114346020022076 0ustar rootrootCREATE TABLE IF NOT EXISTS `help_faq` ( `hf_id` int(11) NOT NULL AUTO_INCREMENT, `hf_section` int(11) DEFAULT NULL, `hf_order` int(11) DEFAULT '0', `hf_question` text, `hf_answer` text, `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hf_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; CREATE TABLE IF NOT EXISTS `help_faq_sections` ( `hfs_id` int(11) NOT NULL AUTO_INCREMENT, `hfs_name` varchar(255) DEFAULT NULL, `hfs_order` int(11) DEFAULT '0', `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hfs_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; CREATE TABLE IF NOT EXISTS `web_folder` ( `web_folder_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `parent_domain_id` int(11) NOT NULL DEFAULT '0', `path` varchar(255) DEFAULT NULL, `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`web_folder_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; CREATE TABLE IF NOT EXISTS `web_folder_user` ( `web_folder_user_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `web_folder_id` int(11) NOT NULL DEFAULT '0', `username` varchar(255) DEFAULT NULL, `password` varchar(255) DEFAULT NULL, `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`web_folder_user_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; DROP TABLE `mail_greylist`; DROP TABLE `firewall_filter`; DROP TABLE `firewall_forward`; DROP TABLE `proxy_reverse`; ispconfig3_install/install/sql/incremental/upd_0025.sql0000775000000000000000000000052215114346020022073 0ustar rootrootALTER TABLE `web_domain` ADD `pm_max_children` INT NOT NULL DEFAULT '50' AFTER `php_fpm_use_socket` , ADD `pm_start_servers` INT NOT NULL DEFAULT '20' AFTER `pm_max_children` , ADD `pm_min_spare_servers` INT NOT NULL DEFAULT '5' AFTER `pm_start_servers` , ADD `pm_max_spare_servers` INT NOT NULL DEFAULT '35' AFTER `pm_min_spare_servers`;ispconfig3_install/install/sql/incremental/upd_0088.sql0000775000000000000000000000572015114346020022111 0ustar rootroot-- rspamd ALTER TABLE `spamfilter_policy` ADD `rspamd_greylisting` ENUM('n','y') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'n' AFTER `policyd_greylist`; ALTER TABLE `spamfilter_policy` ADD `rspamd_spam_greylisting_level` DECIMAL(5,2) NULL DEFAULT NULL AFTER `rspamd_greylisting`; ALTER TABLE `spamfilter_policy` ADD `rspamd_spam_tag_level` DECIMAL(5,2) NULL DEFAULT NULL AFTER `rspamd_spam_greylisting_level`; ALTER TABLE `spamfilter_policy` ADD `rspamd_spam_tag_method` ENUM('add_header','rewrite_subject') CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT 'rewrite_subject' AFTER `rspamd_spam_tag_level`; ALTER TABLE `spamfilter_policy` ADD `rspamd_spam_kill_level` DECIMAL(5,2) NULL DEFAULT NULL AFTER `rspamd_spam_tag_method`; UPDATE `spamfilter_policy` SET `rspamd_greylisting` = 'y' WHERE id = 4; UPDATE `spamfilter_policy` SET `rspamd_greylisting` = 'y' WHERE id = 5; UPDATE `spamfilter_policy` SET `rspamd_greylisting` = 'y' WHERE id = 6; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '4.00'; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '6.00' WHERE id = 1; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '999.00' WHERE id = 2; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '999.00' WHERE id = 3; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '2.00' WHERE id = 6; UPDATE `spamfilter_policy` SET `rspamd_spam_greylisting_level` = '7.00' WHERE id = 7; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '6.00'; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '8.00' WHERE id = 1; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '999.00' WHERE id = 2; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '999.00' WHERE id = 3; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '4.00' WHERE id = 6; UPDATE `spamfilter_policy` SET `rspamd_spam_tag_level` = '10.00' WHERE id = 7; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '10.00'; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '12.00' WHERE id = 1; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '999.00' WHERE id = 2; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '999.00' WHERE id = 3; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '8.00' WHERE id = 6; UPDATE `spamfilter_policy` SET `rspamd_spam_kill_level` = '20.00' WHERE id = 7; -- end of rspamd ALTER TABLE `client` CHANGE COLUMN `password` `password` VARCHAR(200) DEFAULT NULL; ALTER TABLE `ftp_user` CHANGE COLUMN `password` `password` VARCHAR(200) DEFAULT NULL; ALTER TABLE `shell_user` CHANGE COLUMN `password` `password` VARCHAR(200) DEFAULT NULL; ALTER TABLE `sys_user` CHANGE COLUMN `passwort` `passwort` VARCHAR(200) DEFAULT NULL; ALTER TABLE `webdav_user` CHANGE COLUMN `password` `password` VARCHAR(200) DEFAULT NULL; DELETE FROM sys_cron WHERE `next_run` IS NOT NULL AND `next_run` >= DATE_ADD(`last_run`, INTERVAL 30 DAY) AND `next_run` BETWEEN '2020-01-01' AND '2020-01-02';ispconfig3_install/install/sql/incremental/upd_0034.sql0000775000000000000000000000457215114346020022104 0ustar rootroot-- -------------------------------------------------------- -- -- Table structure for table `aps_instances` -- CREATE TABLE IF NOT EXISTS `aps_instances` ( `id` int(4) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `customer_id` int(4) NOT NULL, `package_id` int(4) NOT NULL, `instance_status` int(4) NOT NULL, PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8 ; -- -------------------------------------------------------- -- -- Table structure for table `aps_instances_settings` -- CREATE TABLE IF NOT EXISTS `aps_instances_settings` ( `id` int(4) NOT NULL AUTO_INCREMENT, `server_id` int(11) NOT NULL DEFAULT '0', `instance_id` int(4) NOT NULL, `name` varchar(255) NOT NULL, `value` text NOT NULL, PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8 ; -- -------------------------------------------------------- -- -- Table structure for table `aps_packages` -- CREATE TABLE IF NOT EXISTS `aps_packages` ( `id` int(4) NOT NULL AUTO_INCREMENT, `path` varchar(255) NOT NULL, `name` varchar(255) NOT NULL, `category` varchar(255) NOT NULL, `version` varchar(20) NOT NULL, `release` int(4) NOT NULL, `package_url` TEXT NOT NULL, `package_status` int(1) NOT NULL DEFAULT '2', PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8 ; -- -------------------------------------------------------- -- -- Table structure for table `aps_settings` -- CREATE TABLE IF NOT EXISTS `aps_settings` ( `id` int(4) NOT NULL AUTO_INCREMENT, `name` varchar(255) NOT NULL, `value` text NOT NULL, PRIMARY KEY (`id`), UNIQUE KEY `name` (`name`) ) DEFAULT CHARSET=utf8 ; -- -------------------------------------------------------- -- -- Dumping data for table `aps_settings` -- INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(1, 'ignore-php-extension', ''); INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(2, 'ignore-php-configuration', ''); INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(3, 'ignore-webserver-module', ''); ALTER TABLE `client` ADD `limit_aps` int(11) NOT NULL DEFAULT '0' AFTER `limit_webdav_user`; ALTER TABLE `client_template` ADD `limit_aps` int(11) NOT NULL DEFAULT '0' AFTER `limit_webdav_user`;ispconfig3_install/install/sql/incremental/upd_0031.sql0000775000000000000000000000155315114346020022075 0ustar rootrootCREATE TABLE `server_php` ( `server_php_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `client_id` int(11) unsigned NOT NULL DEFAULT '0', `name` varchar(255) DEFAULT NULL, `php_fastcgi_binary` varchar(255) DEFAULT NULL, `php_fastcgi_ini_dir` varchar(255) DEFAULT NULL, `php_fpm_init_script` varchar(255) DEFAULT NULL, `php_fpm_ini_dir` varchar(255) DEFAULT NULL, `php_fpm_pool_dir` varchar(255) DEFAULT NULL, PRIMARY KEY (`server_php_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `web_domain` ADD `fastcgi_php_version` VARCHAR( 255 ) NULL DEFAULT NULL;ispconfig3_install/install/sql/incremental/upd_0077.sql0000775000000000000000000000015415114346020022103 0ustar rootrootALTER TABLE `ftp_user` ADD `expires` datetime NOT NULL DEFAULT '0000-00-00 00:00:00' AFTER `dl_bandwidth` ; ispconfig3_install/install/sql/incremental/upd_0102.sql0000775000000000000000000000640715152616670022114 0ustar rootroot-- Add last_password_change column to sys_user table ALTER TABLE `sys_user` ADD COLUMN `last_password_change` DATE NULL DEFAULT (CURDATE()); -- Set default php_cli_binary and php_jk_section values for known PHP versions (#6938). -- Only set the values if they are currently NULL - this will not work on all systems but it will not break anything more than it is with NULL. UPDATE `server_php` sp JOIN ( SELECT server_id, `data` FROM `monitor_data` WHERE `type` = 'os_info' ) md ON md.server_id = sp.server_id SET sp.`php_cli_binary` = CASE WHEN (sp.`php_cli_binary` IS NULL OR sp.`php_cli_binary` = '') THEN CASE -- RHEL derivatives -> /usr/bin/phpXY WHEN ( md.`data` LIKE '%"name";s:%:"CentOS%"%' OR md.`data` LIKE '%"name";s:%:"Fedora%"%' OR md.`data` LIKE '%"name";s:%:"Rocky Linux"%' OR md.`data` LIKE '%"name";s:%:"AlmaLinux"%' OR md.`data` LIKE '%"name";s:%:"Red Hat%"%' OR md.`data` LIKE '%"name";s:%:"RHEL%"%' OR md.`data` LIKE '%"name";s:%:"Oracle Linux"%' OR md.`data` LIKE '%"name";s:%:"CloudLinux"%' ) THEN CASE sp.`name` WHEN 'PHP 5.6' THEN '/usr/bin/php56' WHEN 'PHP 7.0' THEN '/usr/bin/php70' WHEN 'PHP 7.1' THEN '/usr/bin/php71' WHEN 'PHP 7.2' THEN '/usr/bin/php72' WHEN 'PHP 7.3' THEN '/usr/bin/php73' WHEN 'PHP 7.4' THEN '/usr/bin/php74' WHEN 'PHP 8.0' THEN '/usr/bin/php80' WHEN 'PHP 8.1' THEN '/usr/bin/php81' WHEN 'PHP 8.2' THEN '/usr/bin/php82' WHEN 'PHP 8.3' THEN '/usr/bin/php83' WHEN 'PHP 8.4' THEN '/usr/bin/php84' ELSE sp.`php_cli_binary` END -- Default (non-RHEL) -> Debian/Ubuntu style /usr/bin/phpX.Y ELSE CASE sp.`name` WHEN 'PHP 5.6' THEN '/usr/bin/php5.6' WHEN 'PHP 7.0' THEN '/usr/bin/php7.0' WHEN 'PHP 7.1' THEN '/usr/bin/php7.1' WHEN 'PHP 7.2' THEN '/usr/bin/php7.2' WHEN 'PHP 7.3' THEN '/usr/bin/php7.3' WHEN 'PHP 7.4' THEN '/usr/bin/php7.4' WHEN 'PHP 8.0' THEN '/usr/bin/php8.0' WHEN 'PHP 8.1' THEN '/usr/bin/php8.1' WHEN 'PHP 8.2' THEN '/usr/bin/php8.2' WHEN 'PHP 8.3' THEN '/usr/bin/php8.3' WHEN 'PHP 8.4' THEN '/usr/bin/php8.4' ELSE sp.`php_cli_binary` END END ELSE sp.`php_cli_binary` END, sp.`php_jk_section` = CASE WHEN (sp.`php_jk_section` IS NULL OR sp.`php_jk_section` = '') THEN CASE sp.`name` WHEN 'PHP 5.6' THEN 'php5_6' WHEN 'PHP 7.0' THEN 'php7_0' WHEN 'PHP 7.1' THEN 'php7_1' WHEN 'PHP 7.2' THEN 'php7_2' WHEN 'PHP 7.3' THEN 'php7_3' WHEN 'PHP 7.4' THEN 'php7_4' WHEN 'PHP 8.0' THEN 'php8_0' WHEN 'PHP 8.1' THEN 'php8_1' WHEN 'PHP 8.2' THEN 'php8_2' WHEN 'PHP 8.3' THEN 'php8_3' WHEN 'PHP 8.4' THEN 'php8_4' ELSE sp.`php_jk_section` END ELSE sp.`php_jk_section` END WHERE sp.`name` IN ('PHP 5.6','PHP 7.0','PHP 7.1','PHP 7.2','PHP 7.3','PHP 7.4', 'PHP 8.0','PHP 8.1','PHP 8.2','PHP 8.3','PHP 8.4') AND ( sp.`php_cli_binary` IS NULL OR sp.`php_cli_binary` = '' OR sp.`php_jk_section` IS NULL OR sp.`php_jk_section` = '' );ispconfig3_install/install/sql/incremental/upd_0006.sql0000775000000000000000000000010615114346020022070 0ustar rootrootALTER TABLE `sys_datalog` CHANGE `data` `data` LONGTEXT NOT NULL; ispconfig3_install/install/sql/incremental/upd_0066.sql0000775000000000000000000000011715114346020022100 0ustar rootrootALTER TABLE `sys_config` DROP `config_id`, ADD PRIMARY KEY (`group`, `name`); ispconfig3_install/install/sql/incremental/upd_0008.sql0000775000000000000000000000035515114346020022100 0ustar rootroot-- database patch for rsa-key based shell access. ALTER TABLE `client` ADD `id_rsa` VARCHAR( 2000 ) NOT NULL ; ALTER TABLE `client` ADD `ssh_rsa` VARCHAR( 600 ) NOT NULL ; ALTER TABLE `shell_user` ADD `ssh_rsa` VARCHAR( 600 ) NOT NULL ; ispconfig3_install/install/sql/incremental/upd_0061.sql0000775000000000000000000000012615114346020022073 0ustar rootrootALTER TABLE `web_domain` ADD `backup_excludes` MEDIUMTEXT NULL AFTER `backup_copies` ;ispconfig3_install/install/sql/incremental/upd_0082.sql0000775000000000000000000000017115114346020022076 0ustar rootrootALTER TABLE `directive_snippets` ADD `master_directive_snippets_id` int(11) unsigned NOT NULL DEFAULT '0' AFTER `active`;ispconfig3_install/install/sql/incremental/upd_0044.sql0000775000000000000000000000026715114346020022102 0ustar rootrootALTER TABLE `client` ADD `paypal_email` VARCHAR( 255 ) NULL DEFAULT NULL AFTER `bank_account_swift` ; ALTER TABLE `web_domain` ADD `proxy_directives` MEDIUMTEXT NULL DEFAULT NULL ; ispconfig3_install/install/sql/incremental/upd_0075.sql0000775000000000000000000001003415114346020022077 0ustar rootrootALTER TABLE `web_database` ADD `last_quota_notification` date NULL default NULL AFTER `database_quota`; ALTER TABLE `ftp_user` CHANGE `username_prefix` `username_prefix` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `mail_domain` CHANGE `dkim` `dkim` enum('n','y') NOT NULL DEFAULT 'n'; ALTER TABLE `mail_forwarding` CHANGE `destination` `destination` text; ALTER TABLE `mail_user` CHANGE `uid` `uid` int(11) unsigned NOT NULL DEFAULT '5000', CHANGE `gid` `gid` int(11) unsigned NOT NULL DEFAULT '5000'; ALTER TABLE `server` CHANGE `proxy_server` `proxy_server` tinyint(1) NOT NULL DEFAULT '0', CHANGE `firewall_server` `firewall_server` tinyint(1) NOT NULL DEFAULT '0', CHANGE `dbversion` `dbversion` int(11) unsigned NOT NULL DEFAULT '1'; ALTER TABLE `server_ip` CHANGE `virtualhost_port` `virtualhost_port` varchar(255) DEFAULT '80,443'; ALTER TABLE `shell_user` CHANGE `username_prefix` `username_prefix` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `client` ADD `limit_dns_slave_zone` int(11) NOT NULL DEFAULT '-1' AFTER `default_slave_dnsserver`; ALTER TABLE `client_template` ADD `limit_dns_slave_zone` int(11) NOT NULL DEFAULT '-1' AFTER `limit_dns_zone`; ALTER TABLE `client` CHANGE `id_rsa` `id_rsa` varchar(2000) NOT NULL DEFAULT '', CHANGE `ssh_rsa` `ssh_rsa` varchar(600) NOT NULL DEFAULT ''; ALTER TABLE `software_package` CHANGE `software_repo_id` `software_repo_id` int(11) unsigned NOT NULL DEFAULT '0'; ALTER TABLE `software_package` ADD `package_installable` enum('yes','no','key') NOT NULL default 'yes' AFTER `package_type`; ALTER TABLE `software_package` ADD `package_requires_db` enum('no','mysql') NOT NULL default 'no' AFTER `package_installable`; ALTER TABLE `software_package` ADD `package_remote_functions` TEXT NULL AFTER `package_requires_db`; ALTER TABLE `software_package` ADD `package_key` varchar(255) NOT NULL DEFAULT '' AFTER `package_remote_functions`; ALTER TABLE `software_package` ADD `package_config` text AFTER `package_key`; ALTER TABLE `software_package` CHANGE `package_name` `package_name` varchar(64) NOT NULL DEFAULT '', CHANGE `package_title` `package_title` varchar(64) NOT NULL DEFAULT '', CHANGE `package_key` `package_key` varchar(255) NOT NULL DEFAULT ''; INSERT IGNORE INTO `sys_config` (`group`, `name`, `value`) VALUES ('interface', 'session_timeout', '0'); ALTER TABLE `sys_datalog` CHANGE `status` `status` set('pending','ok','warning','error') NOT NULL DEFAULT 'ok'; ALTER TABLE `sys_session` CHANGE `session_id` `session_id` varchar(64) NOT NULL DEFAULT ''; ALTER TABLE `sys_user` CHANGE `language` `language` varchar(2) NOT NULL DEFAULT 'en'; ALTER TABLE `sys_user` ADD `id_rsa` varchar(2000) NOT NULL DEFAULT '' AFTER `client_id`, ADD `ssh_rsa` varchar(600) NOT NULL DEFAULT '' AFTER `id_rsa`; ALTER TABLE `webdav_user` CHANGE `username_prefix` `username_prefix` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `web_database` CHANGE `database_name_prefix` `database_name_prefix` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `web_database_user` CHANGE `database_user_prefix` `database_user_prefix` varchar(50) NOT NULL DEFAULT ''; ALTER TABLE `web_domain` DROP COLUMN `document_root_www`; ALTER TABLE `web_domain` CHANGE `ssl_key` `ssl_key` mediumtext, CHANGE `apache_directives` `apache_directives` mediumtext, CHANGE `php_open_basedir` `php_open_basedir` mediumtext, CHANGE `custom_php_ini` `custom_php_ini` mediumtext; CREATE TABLE IF NOT EXISTS `dns_slave` ( `id` int(10) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL default '1', `origin` varchar(255) NOT NULL DEFAULT '', `ns` varchar(255) NOT NULL DEFAULT '', `active` enum('N','Y') NOT NULL DEFAULT 'N', `xfer` varchar(255) NOT NULL DEFAULT '', PRIMARY KEY (`id`), UNIQUE KEY `slave` (`origin`,`server_id`), KEY `active` (`active`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ispconfig3_install/install/sql/incremental/upd_0046.sql0000775000000000000000000000140315114346020022075 0ustar rootroot ALTER TABLE `web_database` ADD `database_name_prefix` VARCHAR( 50 ) NOT NULL AFTER `database_name`; UPDATE `web_database` SET `database_name_prefix` = '#' WHERE 1; ALTER TABLE `web_database_user` ADD `database_user_prefix` VARCHAR( 50 ) NOT NULL AFTER `database_user`; UPDATE `web_database_user` SET `database_user_prefix` = '#' WHERE 1; ALTER TABLE `ftp_user` ADD `username_prefix` VARCHAR( 50 ) NOT NULL AFTER `username`; UPDATE `ftp_user` SET `username_prefix` = '#' WHERE 1; ALTER TABLE `shell_user` ADD `username_prefix` VARCHAR( 50 ) NOT NULL AFTER `username`; UPDATE `shell_user` SET `username_prefix` = '#' WHERE 1; ALTER TABLE `webdav_user` ADD `username_prefix` VARCHAR( 50 ) NOT NULL AFTER `username`; UPDATE `webdav_user` SET `username_prefix` = '#' WHERE 1;ispconfig3_install/install/sql/incremental/upd_0103.sql0000775000000000000000000000456715152616670022122 0ustar rootroot-- #6846 migrate from utf8(mb3) to utf8mb4 -- change database default charset ALTER DATABASE `dbispconfig` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci; -- convert all tables to utf8mb4 DROP PROCEDURE IF EXISTS convert_all_tables; DELIMITER $$ CREATE PROCEDURE convert_all_tables() BEGIN DECLARE done INT DEFAULT FALSE; DECLARE tbl_name VARCHAR(255); DECLARE cur CURSOR FOR SELECT TABLE_NAME FROM information_schema.TABLES WHERE TABLE_SCHEMA = DATABASE() AND TABLE_TYPE = 'BASE TABLE'; DECLARE CONTINUE HANDLER FOR NOT FOUND SET done = TRUE; OPEN cur; read_loop: LOOP FETCH cur INTO tbl_name; IF done THEN LEAVE read_loop; END IF; SET @sql_stmt = CONCAT( 'ALTER TABLE `', tbl_name, '` CONVERT TO CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;' ); PREPARE stmt FROM @sql_stmt; EXECUTE stmt; DEALLOCATE PREPARE stmt; END LOOP; CLOSE cur; END$$ DELIMITER ; CALL convert_all_tables(); DROP PROCEDURE convert_all_tables; -- convert leftover utf8/utf8mb3 columns to utf8mb4 DROP PROCEDURE IF EXISTS convert_utf8_columns; DELIMITER $$ CREATE PROCEDURE convert_utf8_columns() BEGIN DECLARE done INT DEFAULT FALSE; DECLARE tbl VARCHAR(255); DECLARE col VARCHAR(255); DECLARE col_type TEXT; DECLARE is_nullable VARCHAR(3); DECLARE col_default TEXT; DECLARE extra TEXT; DECLARE cur CURSOR FOR SELECT TABLE_NAME, COLUMN_NAME, COLUMN_TYPE, IS_NULLABLE, COLUMN_DEFAULT, EXTRA FROM information_schema.COLUMNS WHERE TABLE_SCHEMA = DATABASE() AND CHARACTER_SET_NAME IN ('utf8', 'utf8mb3') AND EXTRA NOT LIKE '%VIRTUAL%'; DECLARE CONTINUE HANDLER FOR NOT FOUND SET done = TRUE; OPEN cur; col_loop: LOOP FETCH cur INTO tbl, col, col_type, is_nullable, col_default, extra; IF done THEN LEAVE col_loop; END IF; SET @sql_stmt = CONCAT( 'ALTER TABLE `', tbl, '` CHANGE `', col, '` `', col, '` ', col_type, ' CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci', IF(is_nullable = 'NO', ' NOT NULL', ''), IF(col_default IS NOT NULL, CONCAT(' DEFAULT ', QUOTE(col_default)), ''), ';' ); PREPARE stmt FROM @sql_stmt; EXECUTE stmt; DEALLOCATE PREPARE stmt; END LOOP; CLOSE cur; END$$ DELIMITER ; CALL convert_utf8_columns(); DROP PROCEDURE convert_utf8_columns; ALTER TABLE mail_user ADD COLUMN disablereplicator CHAR(1) NOT NULL DEFAULT 'n';ispconfig3_install/install/sql/incremental/upd_0032.sql0000775000000000000000000000050015114346020022065 0ustar rootrootALTER TABLE `web_domain` ADD `pm` ENUM( 'static', 'dynamic', 'ondemand' ) NOT NULL DEFAULT 'dynamic' AFTER `php_fpm_use_socket`; ALTER TABLE `web_domain` ADD `pm_process_idle_timeout` INT NOT NULL DEFAULT '10' AFTER `pm_max_spare_servers` , ADD `pm_max_requests` INT NOT NULL DEFAULT '0' AFTER `pm_process_idle_timeout`;ispconfig3_install/install/sql/incremental/upd_0094.sql0000775000000000000000000000173415114346020022107 0ustar rootroot-- Add column for email backup limit (#5732) ALTER TABLE `client_template` ADD `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_spamfilter_policy`; ALTER TABLE `client` ADD `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_spamfilter_policy`; -- default spamfilter_users.policy_id to 0 ALTER TABLE `spamfilter_users` ALTER `policy_id` SET DEFAULT 0; -- mail_forwarding.source must be unique ALTER TABLE `mail_forwarding` DROP KEY `server_id`; ALTER TABLE `mail_forwarding` ADD KEY `server_id` (`server_id`, `source`); -- Purge apps & addons installer (#5795) - second time due to syntax error in 0093 DROP TABLE IF EXISTS `software_package`; DROP TABLE IF EXISTS `software_repo`; DROP TABLE IF EXISTS `software_update`; DROP TABLE IF EXISTS `software_update_inst`; -- mail_transport.domain must be unique ALTER TABLE `mail_transport` DROP KEY `server_id_2`; ALTER TABLE `mail_transport` ADD UNIQUE KEY `server_id_2` (`server_id`, `domain`); ispconfig3_install/install/sql/incremental/upd_0099.sql0000775000000000000000000000116315114346020022110 0ustar rootrootALTER TABLE `spamfilter_policy` CHANGE `warnvirusrecip` `warnvirusrecip` VARCHAR(1) CHARACTER SET utf8mb3 COLLATE utf8mb3_general_ci NULL DEFAULT 'N', CHANGE `warnbannedrecip` `warnbannedrecip` VARCHAR(1) CHARACTER SET utf8mb3 COLLATE utf8mb3_general_ci NULL DEFAULT 'N', CHANGE `warnbadhrecip` `warnbadhrecip` VARCHAR(1) CHARACTER SET utf8mb3 COLLATE utf8mb3_general_ci NULL DEFAULT 'N'; ALTER TABLE `sys_ini` CHANGE `default_logo` `default_logo` TEXT CHARACTER SET utf8mb3 COLLATE utf8mb3_general_ci NULL; ALTER TABLE `sys_ini` CHANGE `custom_logo` `custom_logo` TEXT CHARACTER SET utf8mb3 COLLATE utf8mb3_general_ci NULL;ispconfig3_install/install/sql/incremental/upd_0010.sql0000775000000000000000000000024715114346020022071 0ustar rootroot-- database patch for separate login for mailbox users ALTER TABLE `mail_user` ADD `login` VARCHAR( 255 ) NOT NULL ; UPDATE `mail_user` SET `login` = `email` WHERE 1 ;ispconfig3_install/install/sql/incremental/upd_0036.sql0000775000000000000000000000023015114346020022071 0ustar rootroot-- -------------------------------------------------------- ALTER TABLE `web_domain` ADD `perl` enum('n','y') NOT NULL default 'n' AFTER `python`; ispconfig3_install/install/sql/incremental/upd_0024.sql0000775000000000000000000000013115114346020022066 0ustar rootrootALTER TABLE `web_domain` ADD `python` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n' AFTER `ruby`;ispconfig3_install/install/sql/incremental/upd_0056.sql0000775000000000000000000000112215114346020022074 0ustar rootrootCREATE TABLE `client_template_assigned` ( `assigned_template_id` bigint(20) NOT NULL auto_increment, `client_id` bigint(11) NOT NULL DEFAULT '0', `client_template_id` int(11) NOT NULL DEFAULT '0', PRIMARY KEY (`assigned_template_id`), KEY `client_id` (`client_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `client` ADD `gender` enum('','m','f') NOT NULL DEFAULT '' AFTER `company_id`, ADD `locked` enum('n','y') NOT NULL DEFAULT 'n' AFTER `created_at`, ADD `canceled` enum('n','y') NOT NULL DEFAULT 'n' AFTER `locked`, ADD `tmp_data` mediumblob AFTER `canceled` ; ispconfig3_install/install/sql/incremental/upd_0049.sql0000775000000000000000000000013615114346020022102 0ustar rootrootALTER TABLE `client_template` CHANGE `limit_aps` `limit_aps` INT( 11 ) NOT NULL DEFAULT '-1'; ispconfig3_install/install/sql/incremental/upd_0015.sql0000775000000000000000000000040415114346020022071 0ustar rootrootALTER TABLE `cron` CHANGE `command` `command` TEXT NOT NULL; ALTER TABLE `client` ADD `limit_openvz_vm` int(11) NOT NULL DEFAULT '0' AFTER `limit_mailmailinglist` , ADD `limit_openvz_vm_template_id` int(11) NOT NULL DEFAULT '0' AFTER `limit_openvz_vm`;ispconfig3_install/install/sql/incremental/upd_0098.sql0000775000000000000000000000211115114346020022101 0ustar rootrootALTER TABLE `mail_user` CHANGE `quota` `quota` BIGINT(20) NOT NULL DEFAULT '0'; ALTER TABLE `server_php` ADD `sortprio` INT(20) NOT NULL DEFAULT '100' AFTER `active`; ALTER TABLE `mail_user` ADD COLUMN `imap_prefix` varchar(255) NULL default NULL AFTER `backup_copies`; -- #6456 comodoca.com needs to become sectigo.com UPDATE `dns_ssl_ca` SET `ca_issue` = 'sectigo.com' WHERE `ca_issue` = 'comodo.com'; UPDATE `dns_ssl_ca` SET `ca_issue` = 'sectigo.com' WHERE `ca_issue` = 'comodoca.com'; UPDATE `dns_ssl_ca` SET `ca_name` = 'Sectigo (formerly Comodo CA)' WHERE `ca_issue` = 'sectigo.com'; -- not updating the dns_rr table to change all CAA records that have comodo.com / comodoca.com - we should not touch users records imo - TP -- #6445 Update the mailbox_soft_delete config option to it's new structure. -- UPDATE server SET config=REGEXP_REPLACE(config, 'mailbox_soft_delete=n', 'mailbox_soft_delete=0') WHERE config LIKE '%mailbox_soft_delete=n%' -- UPDATE server SET config=REGEXP_REPLACE(config, 'mailbox_soft_delete=y', 'mailbox_soft_delete=7') WHERE config LIKE '%mailbox_soft_delete=y%'ispconfig3_install/install/sql/incremental/upd_0096.sql0000775000000000000000000000206415114346020022106 0ustar rootroot-- create mail_relay_domain and load with current domains from mail_transport table CREATE TABLE IF NOT EXISTS `mail_relay_domain` ( `relay_domain_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `domain` varchar(255) DEFAULT NULL, `access` varchar(255) NOT NULL DEFAULT 'OK', `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`relay_domain_id`), UNIQUE KEY `domain` (`domain`, `server_id`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; INSERT INTO `mail_relay_domain` SELECT NULL, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `server_id`, `domain`, 'OK', `active` FROM `mail_transport` WHERE `domain` NOT LIKE '%@%' AND `domain` LIKE '%.%' GROUP BY `domain`, `server_id`; ALTER TABLE `dns_soa` ADD `rendered_zone` MEDIUMTEXT NULL AFTER `dnssec_info`; ispconfig3_install/install/sql/incremental/upd_0087.sql0000775000000000000000000001402615114346020022107 0ustar rootrootALTER TABLE `sys_datalog` ADD `session_id` varchar(64) NOT NULL DEFAULT '' AFTER `error`; ALTER TABLE `sys_user` CHANGE `sys_userid` `sys_userid` INT(11) UNSIGNED NOT NULL DEFAULT '1' COMMENT 'Created by userid'; ALTER TABLE `sys_user` CHANGE `sys_groupid` `sys_groupid` INT(11) UNSIGNED NOT NULL DEFAULT '1' COMMENT 'Created by groupid'; ALTER TABLE `web_domain` ADD COLUMN `php_fpm_chroot` enum('n','y') NOT NULL DEFAULT 'n' AFTER `php_fpm_use_socket`; CREATE TABLE IF NOT EXISTS `dns_ssl_ca` ( `id` int(10) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `active` enum('N','Y') NOT NULL DEFAULT 'N', `ca_name` varchar(255) NOT NULL DEFAULT '', `ca_issue` varchar(255) NOT NULL DEFAULT '', `ca_wildcard` enum('Y','N') NOT NULL DEFAULT 'N', `ca_iodef` text NOT NULL, `ca_critical` tinyint(1) NOT NULL DEFAULT '0', PRIMARY KEY (`id`), UNIQUE KEY (`ca_issue`) ) DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ALTER TABLE `dns_ssl_ca` ADD UNIQUE(`ca_issue`); UPDATE `dns_ssl_ca` SET `ca_issue` = 'comodo.com' WHERE `ca_issue` = 'comodoca.com'; DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'geotrust.com'; DELETE FROM `dns_ssl_ca` WHERE `ca_issue` = 'thawte.com'; UPDATE `dns_ssl_ca` SET `ca_name` = 'Symantec / Thawte / GeoTrust' WHERE `ca_issue` = 'symantec.com'; ALTER TABLE `dns_rr` CHANGE `type` `type` ENUM('A','AAAA','ALIAS','CAA','CNAME','DS','HINFO','LOC','MX','NAPTR','NS','PTR','RP','SRV','TXT','TLSA','DNSKEY') CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL; ALTER TABLE `dns_rr` CHANGE `data` `data` TEXT NOT NULL; INSERT IGNORE INTO `dns_ssl_ca` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `active`, `ca_name`, `ca_issue`, `ca_wildcard`, `ca_iodef`, `ca_critical`) VALUES (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'AC Camerfirma', 'camerfirma.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'ACCV', 'accv.es', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Actalis', 'actalis.it', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Amazon', 'amazon.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Asseco', 'certum.pl', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Buypass', 'buypass.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'CA Disig', 'disig.sk', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'CATCert', 'aoc.cat', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certinomis', 'www.certinomis.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certizen', 'hongkongpost.gov.hk', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'certSIGN', 'certsign.ro', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'CFCA', 'cfca.com.cn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Chunghwa Telecom', 'cht.com.tw', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Comodo', 'comodoca.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'D-TRUST', 'd-trust.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'DigiCert', 'digicert.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'DocuSign', 'docusign.fr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'e-tugra', 'e-tugra.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'EDICOM', 'edicomgroup.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Entrust', 'entrust.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Firmaprofesional', 'firmaprofesional.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'FNMT', 'fnmt.es', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GlobalSign', 'globalsign.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GoDaddy', 'godaddy.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Google Trust Services', 'pki.goog', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GRCA', 'gca.nat.gov.tw', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'HARICA', 'harica.gr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'IdenTrust', 'identrust.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Izenpe', 'izenpe.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Kamu SM', 'kamusm.gov.tr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Let''s Encrypt', 'letsencrypt.org', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Microsec e-Szigno', 'e-szigno.hu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'NetLock', 'netlock.hu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'PKIoverheid', 'www.pkioverheid.nl', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'PROCERT', 'procert.net.ve', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'QuoVadis', 'quovadisglobal.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SECOM', 'secomtrust.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Sertifitseerimiskeskuse', 'sk.ee', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'StartCom', 'startcomca.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SwissSign', 'swisssign.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Symantec / Thawte / GeoTrust', 'symantec.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'T-Systems', 'telesec.de', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Telia', 'telia.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Trustwave', 'trustwave.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Web.com', 'web.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'WISeKey', 'wisekey.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'WoSign', 'wosign.com', 'Y', '', 0); ALTER TABLE `dns_soa` CHANGE `xfer` `xfer` TEXT NULL; ALTER TABLE `dns_soa` CHANGE `also_notify` `also_notify` TEXT NULL; ALTER TABLE `dns_slave` CHANGE `xfer` `xfer` TEXT NULL; ALTER TABLE `firewall` CHANGE `tcp_port` `tcp_port` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL; ALTER TABLE `firewall` CHANGE `udp_port` `udp_port` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL;ispconfig3_install/install/sql/incremental/upd_0022.sql0000775000000000000000000000013615114346020022071 0ustar rootrootALTER TABLE `web_domain` ADD `ipv6_address` VARCHAR( 255 ) default NULL AFTER `ip_address`;ispconfig3_install/install/sql/pre_update.sql0000775000000000000000000000403315114346020020465 0ustar rootroot/* Copyright (c) 2007-2009, Till Brehm, projektfarm Gmbh All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of ISPConfig nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ -- -- These SQL commands will be executed before the ISPConfig update is performed. -- SET FOREIGN_KEY_CHECKS = 0; DROP TABLE IF EXISTS `billing_invoice`; DROP TABLE IF EXISTS `billing_product`; DROP TABLE IF EXISTS `billing_service`; DROP TABLE IF EXISTS `billing_service_class`; DROP TABLE IF EXISTS `billing_tax`; DROP TABLE IF EXISTS `client_address_book`; -- DROP TABLE IF EXISTS `domain`; DROP TABLE IF EXISTS `domain_handle`; DROP TABLE IF EXISTS `domain_provider`; DROP TABLE IF EXISTS `domain_tld`; SET FOREIGN_KEY_CHECKS = 1;ispconfig3_install/install/sql/ispconfig3.sql0000775000175000017500000035502715274161566020100 0ustar phpphp/* Copyright (c) 2007-2012, Till Brehm, projektfarm Gmbh All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of ISPConfig nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ -- Includes -- -- iso_country_list.sql -- -- This will create and then populate a MySQL table with a list of the names and -- ISO 3166 codes for countries in existence as of the date below. -- -- For updates to this file, see http://27.org/isocountrylist/ -- For more about ISO 3166, see http://www.iso.ch/iso/en/prods-services/iso3166ma/02iso-3166-code-lists/list-en1.html -- -- Created by getisocountrylist.pl on Sun Nov 2 14:59:20 2003. -- Wm. Rhodes -- -- -- ISPConfig 3 -- DB-Version: 3.0.0.9 -- SET FOREIGN_KEY_CHECKS = 0; -- -------------------------------------------------------- -- -------------------------------------------------------- -- DB-STRUCTURE -- -------------------------------------------------------- -- -------------------------------------------------------- -- -- Table structure for table `aps_instances` -- CREATE TABLE IF NOT EXISTS `aps_instances` ( `id` int(4) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `customer_id` int(4) NOT NULL DEFAULT '0', `package_id` int(4) NOT NULL DEFAULT '0', `instance_status` int(4) NOT NULL DEFAULT '0', PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `aps_instances_settings` -- CREATE TABLE IF NOT EXISTS `aps_instances_settings` ( `id` int(4) NOT NULL AUTO_INCREMENT, `server_id` int(11) NOT NULL DEFAULT '0', `instance_id` int(4) NOT NULL DEFAULT '0', `name` varchar(255) NOT NULL DEFAULT '', `value` text, PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `aps_packages` -- CREATE TABLE IF NOT EXISTS `aps_packages` ( `id` int(4) NOT NULL AUTO_INCREMENT, `path` varchar(255) NOT NULL DEFAULT '', `name` varchar(255) NOT NULL DEFAULT '', `category` varchar(255) NOT NULL DEFAULT '', `version` varchar(20) NOT NULL DEFAULT '', `release` int(4) NOT NULL DEFAULT '0', `package_url` TEXT, `package_status` int(1) NOT NULL DEFAULT '2', PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Tabellenstruktur für Tabelle `aps_settings` -- CREATE TABLE IF NOT EXISTS `aps_settings` ( `id` int(4) NOT NULL AUTO_INCREMENT, `name` varchar(255) NOT NULL DEFAULT '', `value` text, PRIMARY KEY (`id`), UNIQUE KEY `name` (`name`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `attempts_login` -- CREATE TABLE `attempts_login` ( `ip` varchar(39) NOT NULL DEFAULT '', `times` int(11) DEFAULT NULL, `login_time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `client` -- CREATE TABLE `client` ( `client_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `company_name` varchar(64) DEFAULT NULL, `company_id` varchar(255) DEFAULT NULL, `gender` enum('','m','f') NOT NULL DEFAULT '', `contact_firstname` varchar( 64 ) NOT NULL DEFAULT '', `contact_name` varchar(64) DEFAULT NULL, `customer_no` varchar(64) DEFAULT NULL, `vat_id` varchar(64) DEFAULT NULL, `street` varchar(255) DEFAULT NULL, `zip` varchar(32) DEFAULT NULL, `city` varchar(64) DEFAULT NULL, `state` varchar(32) DEFAULT NULL, `country` char(2) DEFAULT NULL, `telephone` varchar(32) DEFAULT NULL, `mobile` varchar(32) DEFAULT NULL, `fax` varchar(32) DEFAULT NULL, `email` varchar(255) DEFAULT NULL, `internet` varchar(255) NOT NULL DEFAULT '', `icq` varchar(16) DEFAULT NULL, `notes` text, `bank_account_owner` varchar(255) DEFAULT NULL, `bank_account_number` varchar(255) DEFAULT NULL, `bank_code` varchar(255) DEFAULT NULL, `bank_name` varchar(255) DEFAULT NULL, `bank_account_iban` varchar(255) DEFAULT NULL, `bank_account_swift` varchar(255) DEFAULT NULL, `paypal_email` varchar(255) DEFAULT NULL, `default_mailserver` int(11) unsigned NOT NULL DEFAULT '1', `mail_servers` text, `limit_maildomain` int(11) NOT NULL DEFAULT '-1', `limit_mailbox` int(11) NOT NULL DEFAULT '-1', `limit_mailalias` int(11) NOT NULL DEFAULT '-1', `limit_mailaliasdomain` int(11) NOT NULL DEFAULT '-1', `limit_mailforward` int(11) NOT NULL DEFAULT '-1', `limit_mailcatchall` int(11) NOT NULL DEFAULT '-1', `limit_mailrouting` int(11) NOT NULL DEFAULT '0', `limit_mail_wblist` int(11) NOT NULL DEFAULT '0', `limit_mailfilter` int(11) NOT NULL DEFAULT '-1', `limit_fetchmail` int(11) NOT NULL DEFAULT '-1', `limit_mailquota` int(11) NOT NULL DEFAULT '-1', `limit_spamfilter_wblist` int(11) NOT NULL DEFAULT '0', `limit_spamfilter_user` int(11) NOT NULL DEFAULT '0', `limit_spamfilter_policy` int(11) NOT NULL DEFAULT '0', `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y', `limit_relayhost` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n', `default_xmppserver` int(11) unsigned NOT NULL DEFAULT '1', `xmpp_servers` text, `limit_xmpp_domain` int(11) NOT NULL DEFAULT '-1', `limit_xmpp_user` int(11) NOT NULL DEFAULT '-1', `limit_xmpp_muc` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_anon` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_auth_options` varchar(255) NOT NULL DEFAULT 'plain,hashed,isp', `limit_xmpp_vjud` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_proxy` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_status` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_pastebin` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_httparchive` ENUM( 'n', 'y' ) NOT NULL default 'n', `default_webserver` int(11) unsigned NOT NULL DEFAULT '1', `web_servers` text, `limit_web_ip` text, `limit_web_domain` int(11) NOT NULL DEFAULT '-1', `limit_web_quota` int(11) NOT NULL DEFAULT '-1', `web_php_options` varchar(255) NOT NULL DEFAULT 'no,fast-cgi,cgi,mod,suphp,php-fpm,hhvm', `limit_cgi` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssi` enum('n','y') NOT NULL DEFAULT 'n', `limit_perl` enum('n','y') NOT NULL DEFAULT 'n', `limit_ruby` enum('n','y') NOT NULL DEFAULT 'n', `limit_python` enum('n','y') NOT NULL DEFAULT 'n', `force_suexec` enum('n','y') NOT NULL DEFAULT 'y', `limit_hterror` enum('n','y') NOT NULL DEFAULT 'n', `limit_wildcard` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssl` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n', `limit_web_subdomain` int(11) NOT NULL DEFAULT '-1', `limit_web_aliasdomain` int(11) NOT NULL DEFAULT '-1', `limit_ftp_user` int(11) NOT NULL DEFAULT '-1', `limit_shell_user` int(11) NOT NULL DEFAULT '0', `ssh_chroot` varchar(255) NOT NULL DEFAULT 'no,jailkit,ssh-chroot', `limit_webdav_user` int(11) NOT NULL DEFAULT '0', `limit_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y', `limit_directive_snippets` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n', `limit_aps` int(11) NOT NULL DEFAULT '-1', `default_dnsserver` int(11) unsigned NOT NULL DEFAULT '1', `db_servers` text, `limit_dns_zone` int(11) NOT NULL DEFAULT '-1', `default_slave_dnsserver` int(11) unsigned NOT NULL DEFAULT '1', `limit_dns_slave_zone` int(11) NOT NULL DEFAULT '-1', `limit_dns_record` int(11) NOT NULL DEFAULT '-1', `default_dbserver` int(11) NOT NULL DEFAULT '1', `dns_servers` text, `limit_database` int(11) NOT NULL DEFAULT '-1', `limit_database_postgresql` int(11) NOT NULL default '-1', `limit_database_user` int(11) NOT NULL DEFAULT '-1', `limit_database_quota` int(11) NOT NULL default '-1', `limit_cron` int(11) NOT NULL DEFAULT '0', `limit_cron_type` enum('url','chrooted','full') NOT NULL DEFAULT 'url', `limit_cron_frequency` int(11) NOT NULL DEFAULT '5', `limit_traffic_quota` int(11) NOT NULL DEFAULT '-1', `limit_client` int(11) NOT NULL DEFAULT '0', `limit_domainmodule` int(11) NOT NULL DEFAULT '0', `limit_mailmailinglist` int(11) NOT NULL DEFAULT '-1', `limit_openvz_vm` int(11) NOT NULL DEFAULT '0', `limit_openvz_vm_template_id` int(11) NOT NULL DEFAULT '0', `parent_client_id` int(11) unsigned NOT NULL DEFAULT '0', `username` varchar(64) DEFAULT NULL, `password` varchar(200) DEFAULT NULL, `language` char(2) NOT NULL DEFAULT 'en', `usertheme` varchar(32) NOT NULL DEFAULT 'default', `template_master` int(11) unsigned NOT NULL DEFAULT '0', `template_additional` text, `created_at` bigint(20) DEFAULT NULL, `locked` enum('n','y') NOT NULL DEFAULT 'n', `canceled` enum('n','y') NOT NULL DEFAULT 'n', `can_use_api` enum('n','y') NOT NULL DEFAULT 'n', `tmp_data` mediumblob, `id_rsa` text, `ssh_rsa` text, `customer_no_template` varchar(255) DEFAULT 'R[CLIENTID]C[CUSTOMER_NO]', `customer_no_start` int(11) NOT NULL DEFAULT '1', `customer_no_counter` int(11) NOT NULL DEFAULT '0', `added_date` date NULL DEFAULT NULL, `added_by` varchar(255) DEFAULT NULL, `validation_status` enum('accept','review','reject') NOT NULL DEFAULT 'accept', `risk_score` int(10) unsigned NOT NULL DEFAULT '0', `activation_code` varchar(10) NOT NULL DEFAULT '', PRIMARY KEY (`client_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `client_circle` -- CREATE TABLE `client_circle` ( `circle_id` int(11) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `circle_name` varchar(64) DEFAULT NULL, `client_ids` text, `description` text, `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`circle_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `client_template` -- CREATE TABLE `client_template` ( `template_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `template_name` varchar(64) NOT NULL DEFAULT '', `template_type` varchar(1) NOT NULL default 'm', `mail_servers` text, `limit_maildomain` int(11) NOT NULL default '-1', `limit_mailbox` int(11) NOT NULL default '-1', `limit_mailalias` int(11) NOT NULL default '-1', `limit_mailaliasdomain` int(11) NOT NULL default '-1', `limit_mailforward` int(11) NOT NULL default '-1', `limit_mailcatchall` int(11) NOT NULL default '-1', `limit_mailrouting` int(11) NOT NULL default '0', `limit_mail_wblist` int(11) NOT NULL default '0', `limit_mailfilter` int(11) NOT NULL default '-1', `limit_fetchmail` int(11) NOT NULL default '-1', `limit_mailquota` int(11) NOT NULL default '-1', `limit_spamfilter_wblist` int(11) NOT NULL default '0', `limit_spamfilter_user` int(11) NOT NULL default '0', `limit_spamfilter_policy` int(11) NOT NULL default '0', `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y', `limit_relayhost` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n', `default_xmppserver` int(11) unsigned NOT NULL DEFAULT '1', `xmpp_servers` text, `limit_xmpp_domain` int(11) NOT NULL DEFAULT '-1', `limit_xmpp_user` int(11) NOT NULL DEFAULT '-1', `limit_xmpp_muc` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_anon` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_vjud` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_proxy` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_status` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_pastebin` ENUM( 'n', 'y' ) NOT NULL default 'n', `limit_xmpp_httparchive` ENUM( 'n', 'y' ) NOT NULL default 'n', `web_servers` text, `limit_web_ip` text, `limit_web_domain` int(11) NOT NULL default '-1', `limit_web_quota` int(11) NOT NULL default '-1', `web_php_options` varchar(255) NOT NULL DEFAULT '', `limit_cgi` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssi` enum('n','y') NOT NULL DEFAULT 'n', `limit_perl` enum('n','y') NOT NULL DEFAULT 'n', `limit_ruby` enum('n','y') NOT NULL DEFAULT 'n', `limit_python` enum('n','y') NOT NULL DEFAULT 'n', `force_suexec` enum('n','y') NOT NULL DEFAULT 'y', `limit_hterror` enum('n','y') NOT NULL DEFAULT 'n', `limit_wildcard` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssl` enum('n','y') NOT NULL DEFAULT 'n', `limit_ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n', `limit_web_subdomain` int(11) NOT NULL default '-1', `limit_web_aliasdomain` int(11) NOT NULL default '-1', `limit_ftp_user` int(11) NOT NULL default '-1', `limit_shell_user` int(11) NOT NULL default '0', `ssh_chroot` varchar(255) NOT NULL DEFAULT '', `limit_webdav_user` int(11) NOT NULL default '0', `limit_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y', `limit_directive_snippets` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'n', `limit_aps` int(11) NOT NULL DEFAULT '-1', `dns_servers` text, `limit_dns_zone` int(11) NOT NULL default '-1', `default_slave_dnsserver` int(11) NOT NULL DEFAULT '0', `limit_dns_slave_zone` int(11) NOT NULL default '-1', `limit_dns_record` int(11) NOT NULL default '-1', `db_servers` text, `limit_database` int(11) NOT NULL default '-1', `limit_database_postgresql` int(11) NOT NULL default '-1', `limit_database_user` int(11) NOT NULL DEFAULT '-1', `limit_database_quota` int(11) NOT NULL default '-1', `limit_cron` int(11) NOT NULL default '0', `limit_cron_type` enum('url','chrooted','full') NOT NULL default 'url', `limit_cron_frequency` int(11) NOT NULL default '5', `limit_traffic_quota` int(11) NOT NULL default '-1', `limit_client` int(11) NOT NULL default '0', `limit_domainmodule` int(11) NOT NULL DEFAULT '0', `limit_mailmailinglist` int(11) NOT NULL default '-1', `limit_openvz_vm` int(11) NOT NULL DEFAULT '0', `limit_openvz_vm_template_id` int(11) NOT NULL DEFAULT '0', PRIMARY KEY (`template_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `client_template_assigned` -- CREATE TABLE `client_template_assigned` ( `assigned_template_id` bigint(20) NOT NULL auto_increment, `client_id` bigint(11) NOT NULL DEFAULT '0', `client_template_id` int(11) NOT NULL DEFAULT '0', PRIMARY KEY (`assigned_template_id`), KEY `client_id` (`client_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `invoice_message_template` -- CREATE TABLE `client_message_template` ( `client_message_template_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_type` varchar(255) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `subject` varchar(255) DEFAULT NULL, `message` text, PRIMARY KEY (`client_message_template_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -- Dumping data for table `invoice_message_template` -- -- -------------------------------------------------------- -- -- Table structure for table `country` -- CREATE TABLE `country` ( `iso` char(2) NOT NULL DEFAULT '', `name` varchar(64) NOT NULL DEFAULT '', `printable_name` varchar(64) NOT NULL DEFAULT '', `iso3` char(3) DEFAULT NULL, `numcode` smallint(6) DEFAULT NULL, `eu` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`iso`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `cron` -- CREATE TABLE `cron` ( `id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NULL default NULL, `sys_perm_group` varchar(5) NULL default NULL, `sys_perm_other` varchar(5) NULL default NULL, `server_id` int(11) unsigned NOT NULL default '0', `parent_domain_id` int(11) unsigned NOT NULL default '0', `type` enum('url','chrooted','full') NOT NULL default 'url', `command` TEXT, `run_min` varchar(100) NULL, `run_hour` varchar(100) NULL, `run_mday` varchar(100) NULL, `run_month` varchar(100) NULL, `run_wday` varchar(100) NULL, `log` enum('n','y') NOT NULL default 'n', `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `directive_snippets` -- CREATE TABLE IF NOT EXISTS `directive_snippets` ( `directive_snippets_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `name` varchar(255) DEFAULT NULL, `type` varchar(255) DEFAULT NULL, `snippet` mediumtext, `customer_viewable` ENUM('n','y') NOT NULL DEFAULT 'n', `required_php_snippets` varchar(255) NOT NULL DEFAULT '', `active` enum('n','y') NOT NULL DEFAULT 'y', `master_directive_snippets_id` int(11) unsigned NOT NULL DEFAULT '0', `update_sites` ENUM('y','n') NOT NULL DEFAULT 'n', PRIMARY KEY (`directive_snippets_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `dns_rr` -- CREATE TABLE `dns_rr` ( `id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL default '1', `zone` int(11) unsigned NOT NULL DEFAULT '0', `name` varchar(255) NOT NULL DEFAULT '', `type` enum('A','AAAA','ALIAS','CNAME','DNAME','CAA','DS','HINFO','LOC','MX','NAPTR','NS','PTR','RP','SRV','SSHFP','TXT','TLSA','DNSKEY') default NULL, `data` TEXT NOT NULL, `aux` int(11) unsigned NOT NULL default '0', `ttl` int(11) unsigned NOT NULL default '3600', `active` enum('N','Y') NOT NULL default 'Y', `stamp` timestamp NOT NULL default CURRENT_TIMESTAMP, `serial` int(10) unsigned default NULL, PRIMARY KEY (`id`), KEY `rr` (`zone`,`type`,`name`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `dns_slave` -- CREATE TABLE `dns_slave` ( `id` int(10) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL default '1', `origin` varchar(255) NOT NULL DEFAULT '', `ns` varchar(255) NOT NULL DEFAULT '', `active` enum('N','Y') NOT NULL DEFAULT 'N', `xfer` TEXT NULL, PRIMARY KEY (`id`), UNIQUE KEY `slave` (`origin`,`server_id`), KEY `active` (`active`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `dns_ssl_ca` -- CREATE TABLE IF NOT EXISTS `dns_ssl_ca` ( `id` int(10) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `active` enum('N','Y') NOT NULL DEFAULT 'N', `ca_name` varchar(255) NOT NULL DEFAULT '', `ca_issue` varchar(255) NOT NULL DEFAULT '', `ca_wildcard` enum('Y','N') NOT NULL DEFAULT 'N', `ca_iodef` text NOT NULL, `ca_critical` tinyint(1) NOT NULL DEFAULT '0', PRIMARY KEY (`id`), UNIQUE KEY (`ca_issue`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; ALTER TABLE `dns_ssl_ca` ADD UNIQUE(`ca_issue`); INSERT INTO `dns_ssl_ca` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `active`, `ca_name`, `ca_issue`, `ca_wildcard`, `ca_iodef`, `ca_critical`) VALUES (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'ACCV', 'accv.es', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Actalis', 'actalis.it', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Amazon Trust Services', 'amazon.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'ANF AC', 'anf.es', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Apple', 'pki.apple.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'BJCA', 'bjca.cn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Buypass', 'buypass.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'CATCert', 'aoc.cat', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certicámara', 'certicamara.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certigna', 'certigna.fr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certainly', 'certainly.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'certSIGN', 'certsign.ro', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certinomis (Docaposte)', 'www.certinomis.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certizen', 'ecert.gov.hk', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Certum (Asseco Data Systems)', 'certum.pl', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'CFCA', 'cfca.com.cn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Chunghwa Telecom', 'pki.hinet.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Cybertrust Japan / JCSI', 'cybertrust.co.jp', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Deutsche Telekom Security (T-Systems)', 'telesec.de', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'DFN-PKI', 'pki.dfn.de', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'DigiCert (incl. Thawte, GeoTrust, RapidSSL)', 'digicert.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'D-TRUST', 'dtrust.de', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'EDICOM', 'edicomgroup.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'emSign (eMudhra)', 'emsign.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'e-tugra', 'e-tugra.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Eviden (Atos TrustedRoot)', 'atos.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Firmaprofesional', 'firmaprofesional.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'FNMT', 'fnmt.es', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GDCA', 'gdca.com.cn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GlobalSign', 'globalsign.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GLOBALTRUST', 'globaltrust.eu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GoDaddy', 'godaddy.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Google Trust Services', 'pki.goog', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'GRCA', 'gca.nat.gov.tw', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'HARICA', 'harica.gr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'IdenTrust', 'identrust.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'iTrusChina', 'itrus.cn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Izenpe', 'izenpe.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Kamu SM', 'kamusm.gov.tr', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'KIR (Poland)', 'elektronicznypodpis.pl', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'KPN', 'kpn.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Let''s Encrypt', 'letsencrypt.org', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Microsec (e-Szigno)', 'e-szigno.hu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'MULTICERT', 'multicert.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'NAVER Cloud Trust Services', 'navercloudtrust.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'NetLock', 'netlock.hu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Network Solutions (Web.com)', 'web.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'OISTE (WISeKey)', 'wisekey.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'PKIoverheid', 'pkioverheid.nl', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'PostSignum', 'postsignum.cz', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'QuoVadis', 'quovadisglobal.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SECOM', 'secomtrust.net', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Sectigo', 'sectigo.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SHECA', 'sheca.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SK ID Solutions', 'skidsolutions.eu', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SSL.com', 'ssl.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'SwissSign', 'swisssign.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Swiss Federal IT (FOITT)', 'admin.ch', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Telia', 'telia.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TrustAsia', 'trustasia.com', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TunTrust (ANCE)', 'tuntrust.tn', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'TWCA', 'twca.com.tw', 'Y', '', 0), (NULL, 1, 1, 'riud', 'riud', '', 'Y', 'Viking Cloud (Trustwave)', 'trustwave.com', 'Y', '', 0); -- -------------------------------------------------------- -- -- Table structure for table `dns_soa` -- CREATE TABLE `dns_soa` ( `id` int(10) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL default '1', `origin` varchar(255) NOT NULL DEFAULT '', `ns` varchar(255) NOT NULL DEFAULT '', `mbox` varchar(255) NOT NULL DEFAULT '', `serial` int(11) unsigned NOT NULL default '1', `refresh` int(11) unsigned NOT NULL default '28800', `retry` int(11) unsigned NOT NULL default '7200', `expire` int(11) unsigned NOT NULL default '604800', `minimum` int(11) unsigned NOT NULL default '3600', `ttl` int(11) unsigned NOT NULL default '3600', `active` enum('N','Y') NOT NULL DEFAULT 'N', `xfer` TEXT NULL, `also_notify` TEXT NULL, `update_acl` varchar(255) default NULL, `dnssec_initialized` ENUM('Y','N') NOT NULL DEFAULT 'N', `dnssec_wanted` ENUM('Y','N') NOT NULL DEFAULT 'N', `dnssec_algo` SET('NSEC3RSASHA1','ECDSAP256SHA256') NOT NULL DEFAULT 'ECDSAP256SHA256', `dnssec_last_signed` BIGINT NOT NULL DEFAULT '0', `dnssec_info` TEXT NULL, `rendered_zone` MEDIUMTEXT NULL, PRIMARY KEY (`id`), UNIQUE KEY `origin` (`origin`), KEY `active` (`active`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `dns_template` -- CREATE TABLE `dns_template` ( `template_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `name` varchar(64) default NULL, `fields` varchar(255) default NULL, `template` text, `visible` enum('N','Y') NOT NULL default 'Y', PRIMARY KEY (`template_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -- Table structure for table `domain` -- CREATE TABLE `domain` ( `domain_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `domain` varchar(255) NOT NULL default '', PRIMARY KEY (`domain_id`), UNIQUE KEY `domain` (`domain`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `firewall` -- CREATE TABLE `firewall` ( `firewall_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `tcp_port` text, `udp_port` text, `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`firewall_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `ftp_user` -- CREATE TABLE `ftp_user` ( `ftp_user_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `parent_domain_id` int(11) unsigned NOT NULL default '0', `username` varchar(64) default NULL, `username_prefix` varchar(50) NOT NULL default '', `password` varchar(200) default NULL, `quota_size` bigint(20) NOT NULL default '-1', `active` enum('n','y') NOT NULL default 'y', `uid` varchar(64) default NULL, `gid` varchar(64) default NULL, `dir` varchar(255) default NULL, `quota_files` bigint(20) NOT NULL default '-1', `ul_ratio` int(11) NOT NULL default '-1', `dl_ratio` int(11) NOT NULL default '-1', `ul_bandwidth` int(11) NOT NULL default '-1', `dl_bandwidth` int(11) NOT NULL default '-1', `expires` datetime NULL DEFAULT NULL, `user_type` set('user','system') NOT NULL DEFAULT 'user', `user_config` text, PRIMARY KEY (`ftp_user_id`), KEY `active` (`active`), KEY `server_id` (`server_id`), KEY `username` (`username`), KEY `quota_files` (`quota_files`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `ftp_traffic` -- CREATE TABLE `ftp_traffic` ( `hostname` varchar(255) NOT NULL, `traffic_date` date NOT NULL, `in_bytes` bigint(32) unsigned NOT NULL, `out_bytes` bigint(32) unsigned NOT NULL, UNIQUE KEY (`hostname`,`traffic_date`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `help_faq` -- CREATE TABLE `help_faq` ( `hf_id` int(11) NOT NULL AUTO_INCREMENT, `hf_section` int(11) DEFAULT NULL, `hf_order` int(11) DEFAULT '0', `hf_question` text, `hf_answer` text, `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hf_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `help_faq_sections` -- CREATE TABLE `help_faq_sections` ( `hfs_id` int(11) NOT NULL AUTO_INCREMENT, `hfs_name` varchar(255) DEFAULT NULL, `hfs_order` int(11) DEFAULT '0', `sys_userid` int(11) DEFAULT NULL, `sys_groupid` int(11) DEFAULT NULL, `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, PRIMARY KEY (`hfs_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- Table structure for table `iptables` -- DROP TABLE IF EXISTS `iptables`; CREATE TABLE `iptables` ( `iptables_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL DEFAULT '0', `table` varchar(10) DEFAULT NULL COMMENT 'INPUT OUTPUT FORWARD', `source_ip` varchar(16) DEFAULT NULL, `destination_ip` varchar(16) DEFAULT NULL, `protocol` varchar(10) DEFAULT 'TCP' COMMENT 'TCP UDP GRE', `singleport` varchar(10) DEFAULT NULL, `multiport` varchar(40) DEFAULT NULL, `state` varchar(20) DEFAULT NULL COMMENT 'NEW ESTABLISHED RECNET etc', `target` varchar(10) DEFAULT NULL COMMENT 'ACCEPT DROP REJECT LOG', `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`iptables_id`) ) AUTO_INCREMENT=5 DEFAULT CHARSET=utf8mb4; -- -------------------------------------------------------- -- -- Table structure for table `mail_access` -- CREATE TABLE `mail_access` ( `access_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) NOT NULL default '0', `source` varchar(255) NOT NULL DEFAULT '', `access` varchar(255) NOT NULL DEFAULT '', `type` set('recipient','sender','client') NOT NULL DEFAULT 'recipient', `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`access_id`), UNIQUE KEY `unique_source` (`server_id`,`source`,`type`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_backup` -- CREATE TABLE `mail_backup` ( `backup_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL DEFAULT '0', `parent_domain_id` int(10) unsigned NOT NULL DEFAULT '0', `mailuser_id` int(10) unsigned NOT NULL DEFAULT '0', `backup_mode` varchar(64) NOT NULL DEFAULT '', `tstamp` int(10) unsigned NOT NULL DEFAULT '0', `filename` varchar(255) NOT NULL DEFAULT '', `filesize` VARCHAR(20) NOT NULL DEFAULT '', PRIMARY KEY (`backup_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_content_filter` -- CREATE TABLE `mail_content_filter` ( `content_filter_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) NOT NULL default '0', `type` varchar(255) default NULL, `pattern` varchar(255) default NULL, `data` varchar(255) default NULL, `action` varchar(255) default NULL, `active` varchar(255) NOT NULL default 'y', PRIMARY KEY (`content_filter_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_domain` -- CREATE TABLE `mail_domain` ( `domain_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL default '', `dkim` ENUM( 'n', 'y' ) NOT NULL default 'n', `dkim_selector` varchar(63) NOT NULL DEFAULT 'default', `dkim_private` mediumtext NULL, `dkim_public` mediumtext NULL, `relay_host` varchar(255) NOT NULL DEFAULT '', `relay_user` varchar(255) NOT NULL DEFAULT '', `relay_pass` varchar(255) NOT NULL DEFAULT '', `active` enum('n','y') NOT NULL DEFAULT 'n', `local_delivery` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`domain_id`), KEY `server_id` (`server_id`,`domain`), KEY `domain_active` (`domain`,`active`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_forwarding` -- CREATE TABLE `mail_forwarding` ( `forwarding_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `source` varchar(255) NOT NULL DEFAULT '', `destination` text, `type` enum('alias','aliasdomain','forward','catchall') NOT NULL default 'alias', `active` enum('n','y') NOT NULL DEFAULT 'n', `allow_send_as` ENUM('n','y') NOT NULL DEFAULT 'n', `greylisting` enum('n','y' ) NOT NULL DEFAULT 'n', PRIMARY KEY (`forwarding_id`), KEY `server_id` (`server_id`, `source`), KEY `type` (`type`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_get` -- CREATE TABLE `mail_get` ( `mailget_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `type` varchar(255) default NULL, `source_server` varchar(255) default NULL, `source_username` varchar(255) default NULL, `source_password` varchar(64) default NULL, `source_delete` varchar(255) NOT NULL default 'y', `source_read_all` varchar(255) NOT NULL default 'y', `destination` varchar(255) default NULL, `active` varchar(255) NOT NULL default 'y', PRIMARY KEY (`mailget_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Tabellenstruktur für Tabelle `mail_mailinglist` -- CREATE TABLE `mail_mailinglist` ( `mailinglist_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL DEFAULT '', `listname` varchar(255) NOT NULL DEFAULT '', `email` varchar(255) NOT NULL DEFAULT '', `password` varchar(255) NOT NULL DEFAULT '', PRIMARY KEY (`mailinglist_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for Table `mail_relay_domain` -- CREATE TABLE IF NOT EXISTS `mail_relay_domain` ( `relay_domain_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `domain` varchar(255) DEFAULT NULL, `access` varchar(255) NOT NULL DEFAULT 'OK', `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`relay_domain_id`), UNIQUE KEY `domain` (`domain`, `server_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for Table `mail_relay_recipient` -- CREATE TABLE IF NOT EXISTS `mail_relay_recipient` ( `relay_recipient_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `source` varchar(255) DEFAULT NULL, `access` varchar(255) NOT NULL DEFAULT 'OK', `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`relay_recipient_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_traffic` -- CREATE TABLE `mail_traffic` ( `traffic_id` int(11) unsigned NOT NULL auto_increment, `mailuser_id` int(11) unsigned NOT NULL DEFAULT '0', `month` char(7) NOT NULL DEFAULT '', `traffic` bigint(20) unsigned NOT NULL DEFAULT '0', PRIMARY KEY (`traffic_id`), KEY `mailuser_id` (`mailuser_id`,`month`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_transport` -- CREATE TABLE `mail_transport` ( `transport_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL default '', `transport` varchar(255) NOT NULL DEFAULT '', `sort_order` int(11) unsigned NOT NULL default '5', `active` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`transport_id`), KEY `server_id` (`server_id`,`transport`), UNIQUE KEY `server_id_2` (`server_id`, `domain`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_user` -- CREATE TABLE `mail_user` ( `mailuser_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `email` varchar(255) NOT NULL default '', `login` varchar(255) NOT NULL default '', `password` varchar(255) NOT NULL default '', `name` varchar(255) NOT NULL default '', `uid` int(11) NOT NULL default '5000', `gid` int(11) NOT NULL default '5000', `maildir` varchar(255) NOT NULL default '', `maildir_format` varchar(255) NOT NULL default 'maildir', `quota` bigint(20) NOT NULL default '0', `cc` text, `forward_in_lda` enum('n','y') NOT NULL default 'n', `sender_cc` varchar(255) NOT NULL default '', `homedir` varchar(255) NOT NULL default '', `autoresponder` enum('n','y') NOT NULL default 'n', `autoresponder_start_date` datetime NULL default NULL, `autoresponder_end_date` datetime NULL default NULL, `autoresponder_subject` varchar(255) NOT NULL default 'Out of office reply', `autoresponder_text` mediumtext NULL, `move_junk` enum('y','a','n') NOT NULL default 'y', `purge_trash_days` INT NOT NULL DEFAULT '0', `purge_junk_days` INT NOT NULL DEFAULT '0', `custom_mailfilter` mediumtext, `postfix` enum('n','y') NOT NULL default 'y', `greylisting` enum('n','y' ) NOT NULL DEFAULT 'n', `access` enum('n','y') NOT NULL default 'y', `disableimap` enum('n','y') NOT NULL default 'n', `disablepop3` enum('n','y') NOT NULL default 'n', `disabledeliver` enum('n','y') NOT NULL default 'n', `disablesmtp` enum('n','y') NOT NULL default 'n', `disablesieve` enum('n','y') NOT NULL default 'n', `disablesieve-filter` enum('n','y') NOT NULL default 'n', `disablelda` enum('n','y') NOT NULL default 'n', `disablelmtp` enum('n','y') NOT NULL default 'n', `disabledoveadm` enum('n','y') NOT NULL default 'n', `last_access` int(11) NULL DEFAULT NULL, `disablequota-status` enum('n','y') NOT NULL default 'n', `disableindexer-worker` enum('n','y') NOT NULL default 'n', `disablereplicator` enum('n','y') NOT NULL default 'n', `last_quota_notification` date NULL default NULL, `backup_interval` VARCHAR( 255 ) NOT NULL default 'none', `backup_copies` INT NOT NULL DEFAULT '1', `imap_prefix` varchar(255) NULL default NULL, PRIMARY KEY (`mailuser_id`), KEY `server_id` (`server_id`,`email`), KEY `email_access` (`email`,`access`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `mail_user_filter` -- CREATE TABLE `mail_user_filter` ( `filter_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `mailuser_id` int(11) unsigned NOT NULL default '0', `rulename` varchar(64) default NULL, `source` varchar(255) default NULL, `searchterm` varchar(255) default NULL, `op` varchar(255) default NULL, `action` varchar(255) default NULL, `target` varchar(255) default NULL, `active` enum('n','y') NOT NULL default 'y', PRIMARY KEY (`filter_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `monitor_data` -- CREATE TABLE `monitor_data` ( `server_id` int(11) unsigned NOT NULL default '0', `type` varchar(255) NOT NULL default '', `created` int(11) unsigned NOT NULL default '0', `data` mediumtext, `state` enum('no_state','unknown','ok','info','warning','critical','error') NOT NULL DEFAULT 'unknown', PRIMARY KEY (`server_id`,`type`,`created`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `openvz_ip` -- CREATE TABLE IF NOT EXISTS `openvz_ip` ( `ip_address_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `ip_address` varchar(39) DEFAULT NULL, `vm_id` int(11) NOT NULL DEFAULT '0', `reserved` varchar(255) NOT NULL DEFAULT 'n', `additional` varchar(255) NOT NULL DEFAULT 'n', PRIMARY KEY (`ip_address_id`) ) DEFAULT CHARSET=utf8mb4 ; -- -- Dumping data for table `openvz_ip` -- -- -------------------------------------------------------- -- -- Table structure for table `openvz_ostemplate` -- CREATE TABLE IF NOT EXISTS `openvz_ostemplate` ( `ostemplate_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `template_file` varchar(255) NOT NULL DEFAULT '', `server_id` int(11) NOT NULL DEFAULT '0', `allservers` varchar(255) NOT NULL DEFAULT 'y', `active` varchar(255) NOT NULL DEFAULT 'y', `description` text, PRIMARY KEY (`ostemplate_id`) ) DEFAULT CHARSET=utf8mb4 ; -- -- Dumping data for table `openvz_ostemplate` -- INSERT INTO `openvz_ostemplate` (`ostemplate_id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `template_name`, `template_file`, `server_id`, `allservers`, `active`, `description`) VALUES(1, 1, 1, 'riud', 'riud', '', 'Debian minimal', 'debian-minimal-x86', 1, 'y', 'y', 'Debian minimal image.'); -- -------------------------------------------------------- -- -- Table structure for table `openvz_template` -- CREATE TABLE IF NOT EXISTS `openvz_template` ( `template_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `template_name` varchar(255) DEFAULT NULL, `diskspace` int(11) NOT NULL DEFAULT '0', `traffic` int(11) NOT NULL DEFAULT '-1', `bandwidth` int(11) NOT NULL DEFAULT '-1', `ram` int(11) NOT NULL DEFAULT '0', `ram_burst` int(11) NOT NULL DEFAULT '0', `cpu_units` int(11) NOT NULL DEFAULT '1000', `cpu_num` int(11) NOT NULL DEFAULT '4', `cpu_limit` int(11) NOT NULL DEFAULT '400', `io_priority` int(11) NOT NULL DEFAULT '4', `active` varchar(255) NOT NULL DEFAULT 'y', `description` text, `numproc` varchar(255) DEFAULT NULL, `numtcpsock` varchar(255) DEFAULT NULL, `numothersock` varchar(255) DEFAULT NULL, `vmguarpages` varchar(255) DEFAULT NULL, `kmemsize` varchar(255) DEFAULT NULL, `tcpsndbuf` varchar(255) DEFAULT NULL, `tcprcvbuf` varchar(255) DEFAULT NULL, `othersockbuf` varchar(255) DEFAULT NULL, `dgramrcvbuf` varchar(255) DEFAULT NULL, `oomguarpages` varchar(255) DEFAULT NULL, `privvmpages` varchar(255) DEFAULT NULL, `lockedpages` varchar(255) DEFAULT NULL, `shmpages` varchar(255) DEFAULT NULL, `physpages` varchar(255) DEFAULT NULL, `numfile` varchar(255) DEFAULT NULL, `avnumproc` varchar(255) DEFAULT NULL, `numflock` varchar(255) DEFAULT NULL, `numpty` varchar(255) DEFAULT NULL, `numsiginfo` varchar(255) DEFAULT NULL, `dcachesize` varchar(255) DEFAULT NULL, `numiptent` varchar(255) DEFAULT NULL, `swappages` varchar(255) DEFAULT NULL, `hostname` varchar(255) DEFAULT NULL, `nameserver` varchar(255) DEFAULT NULL, `create_dns` varchar(1) NOT NULL DEFAULT 'n', `capability` varchar(255) DEFAULT NULL, `features` varchar(255) DEFAULT NULL, `iptables` varchar(255) DEFAULT NULL, `custom` text, PRIMARY KEY (`template_id`) ) DEFAULT CHARSET=utf8mb4 ; -- -- Dumping data for table `openvz_template` -- INSERT INTO `openvz_template` (`template_id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `template_name`, `diskspace`, `traffic`, `bandwidth`, `ram`, `ram_burst`, `cpu_units`, `cpu_num`, `cpu_limit`, `io_priority`, `active`, `description`, `numproc`, `numtcpsock`, `numothersock`, `vmguarpages`, `kmemsize`, `tcpsndbuf`, `tcprcvbuf`, `othersockbuf`, `dgramrcvbuf`, `oomguarpages`, `privvmpages`, `lockedpages`, `shmpages`, `physpages`, `numfile`, `avnumproc`, `numflock`, `numpty`, `numsiginfo`, `dcachesize`, `numiptent`, `swappages`, `hostname`, `nameserver`, `create_dns`, `capability`, `features`, `iptables`, `custom`) VALUES(1, 1, 1, 'riud', 'riud', '', 'small', 10, -1, -1, 256, 512, 1000, 4, 400, 4, 'y', '', '999999:999999', '7999992:7999992', '7999992:7999992', '65536:unlimited', '2147483646:2147483646', '214748160:396774400', '214748160:396774400', '214748160:396774400', '214748160:396774400', '65536:65536', '131072:139264', '999999:999999', '65536:65536', '0:2147483647', '23999976:23999976', '180:180', '999999:999999', '500000:500000', '999999:999999', '2147483646:2147483646', '999999:999999', '256000:256000', 'v{VEID}.test.tld', '8.8.8.8 8.8.4.4', 'n', '', '', '', ''); -- -------------------------------------------------------- -- -- Table structure for table `openvz_traffic` -- CREATE TABLE IF NOT EXISTS `openvz_traffic` ( `veid` int(11) NOT NULL DEFAULT '0', `traffic_date` date NULL DEFAULT NULL, `traffic_bytes` bigint(32) unsigned NOT NULL DEFAULT '0', UNIQUE KEY (`veid`,`traffic_date`) ) DEFAULT CHARSET=utf8mb4; -- -- Dumping data for table `openvz_traffic` -- -- -------------------------------------------------------- -- -- Table structure for table `openvz_vm` -- CREATE TABLE IF NOT EXISTS `openvz_vm` ( `vm_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `veid` int(10) unsigned NOT NULL DEFAULT '0', `ostemplate_id` int(11) NOT NULL DEFAULT '0', `template_id` int(11) NOT NULL DEFAULT '0', `ip_address` varchar(255) NOT NULL DEFAULT '', `hostname` varchar(255) DEFAULT NULL, `vm_password` varchar(255) DEFAULT NULL, `start_boot` varchar(255) NOT NULL DEFAULT 'y', `bootorder` int(11) NOT NULL DEFAULT '1', `active` varchar(255) NOT NULL DEFAULT 'y', `active_until_date` date NULL DEFAULT NULL, `description` text, `diskspace` int(11) NOT NULL DEFAULT '0', `traffic` int(11) NOT NULL DEFAULT '-1', `bandwidth` int(11) NOT NULL DEFAULT '-1', `ram` int(11) NOT NULL DEFAULT '0', `ram_burst` int(11) NOT NULL DEFAULT '0', `cpu_units` int(11) NOT NULL DEFAULT '1000', `cpu_num` int(11) NOT NULL DEFAULT '4', `cpu_limit` int(11) NOT NULL DEFAULT '400', `io_priority` int(11) NOT NULL DEFAULT '4', `nameserver` varchar(255) NOT NULL DEFAULT '8.8.8.8 8.8.4.4', `create_dns` varchar(1) NOT NULL DEFAULT 'n', `capability` text, `features` text, `iptables` text, `config` mediumtext, `custom` text, PRIMARY KEY (`vm_id`) ) DEFAULT CHARSET=utf8mb4 ; -- -- Dumping data for table `openvz_vm` -- -- -------------------------------------------------------- -- -- Table structure for table `remote_session` -- CREATE TABLE `remote_session` ( `remote_session` varchar(64) NOT NULL DEFAULT '', `remote_userid` int(11) unsigned NOT NULL DEFAULT '0', `remote_functions` text, `client_login` tinyint(1) unsigned NOT NULL default '0', `tstamp` int(10) unsigned NOT NULL DEFAULT '0', `remote_ip` varchar(39) NOT NULL DEFAULT '', PRIMARY KEY (`remote_session`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `remote_user` -- CREATE TABLE `remote_user` ( `remote_userid` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `remote_username` varchar(64) NOT NULL DEFAULT '', `remote_password` varchar(200) NOT NULL DEFAULT '', `remote_access` enum('y','n') NOT NULL DEFAULT 'y', `remote_ips` TEXT, `remote_functions` text, PRIMARY KEY (`remote_userid`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `server` -- CREATE TABLE `server` ( `server_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_name` varchar(255) NOT NULL default '', `mail_server` tinyint(1) NOT NULL default '0', `web_server` tinyint(1) NOT NULL default '0', `dns_server` tinyint(1) NOT NULL default '0', `file_server` tinyint(1) NOT NULL default '0', `db_server` tinyint(1) NOT NULL default '0', `vserver_server` tinyint(1) NOT NULL default '0', `proxy_server` tinyint(1) NOT NULL default '0', `firewall_server` tinyint(1) NOT NULL default '0', `xmpp_server` tinyint(1) NOT NULL default '0', `config` text, `updated` bigint(20) unsigned NOT NULL default '0', `mirror_server_id` int(11) unsigned NOT NULL default '0', `dbversion` int(11) unsigned NOT NULL default '1', `active` tinyint(1) NOT NULL default '1', PRIMARY KEY (`server_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `server_ip` -- CREATE TABLE `server_ip` ( `server_ip_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `client_id` int(11) unsigned NOT NULL default '0', `ip_type` enum( 'IPv4', 'IPv6' ) NOT NULL DEFAULT 'IPv4', `ip_address` varchar(39) default NULL, `virtualhost` enum('n','y') NOT NULL default 'y', `virtualhost_port` varchar(255) default '80,443', PRIMARY KEY (`server_ip_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `server_ip_map` -- CREATE TABLE `server_ip_map` ( `server_ip_map_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `source_ip` varchar(15) DEFAULT NULL, `destination_ip` varchar(35) DEFAULT '', `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`server_ip_map_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `server_php` -- CREATE TABLE `server_php` ( `server_php_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `client_id` int(11) unsigned NOT NULL DEFAULT '0', `name` varchar(255) DEFAULT NULL, `php_fastcgi_binary` varchar(255) DEFAULT NULL, `php_fastcgi_ini_dir` varchar(255) DEFAULT NULL, `php_fpm_init_script` varchar(255) DEFAULT NULL, `php_fpm_ini_dir` varchar(255) DEFAULT NULL, `php_fpm_pool_dir` varchar(255) DEFAULT NULL, `php_fpm_socket_dir` varchar(255) DEFAULT NULL, `php_cli_binary` varchar(255) DEFAULT NULL, `php_jk_section` varchar(255) DEFAULT NULL, `active` enum('n','y') NOT NULL DEFAULT 'y', `sortprio` int(20) NOT NULL DEFAULT 100, PRIMARY KEY (`server_php_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `shell_user` -- CREATE TABLE `shell_user` ( `shell_user_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `parent_domain_id` int(11) unsigned NOT NULL default '0', `username` varchar(64) default NULL, `username_prefix` varchar(50) NOT NULL default '', `password` varchar(200) default NULL, `quota_size` bigint(20) NOT NULL default '-1', `active` enum('n','y') NOT NULL default 'y', `puser` varchar(255) default NULL, `pgroup` varchar(255) default NULL, `shell` varchar(255) NOT NULL default '/bin/bash', `dir` varchar(255) default NULL, `chroot` varchar(255) NOT NULL DEFAULT '', `ssh_rsa` text, PRIMARY KEY (`shell_user_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `spamfilter_policy` -- CREATE TABLE `spamfilter_policy` ( `id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `policy_name` varchar(64) default NULL, `virus_lover` enum('N','Y') default 'N', `spam_lover` enum('N','Y') default 'N', `banned_files_lover` enum('N','Y') default 'N', `bad_header_lover` enum('N','Y') default 'N', `bypass_virus_checks` enum('N','Y') default 'N', `bypass_spam_checks` enum('N','Y') default 'N', `bypass_banned_checks` enum('N','Y') default 'N', `bypass_header_checks` enum('N','Y') default 'N', `spam_modifies_subj` enum('N','Y') default 'N', `virus_quarantine_to` varchar(255) default NULL, `spam_quarantine_to` varchar(255) default NULL, `banned_quarantine_to` varchar(255) default NULL, `bad_header_quarantine_to` varchar(255) default NULL, `clean_quarantine_to` varchar(255) default NULL, `other_quarantine_to` varchar(255) default NULL, `spam_tag_level` DECIMAL(5,2) default NULL, `spam_tag2_level` DECIMAL(5,2) default NULL, `spam_kill_level` DECIMAL(5,2) default NULL, `spam_dsn_cutoff_level` DECIMAL(5,2) default NULL, `spam_quarantine_cutoff_level` DECIMAL(5,2) default NULL, `addr_extension_virus` varchar(64) default NULL, `addr_extension_spam` varchar(64) default NULL, `addr_extension_banned` varchar(64) default NULL, `addr_extension_bad_header` varchar(64) default NULL, `warnvirusrecip` VARCHAR(1) NULL default 'N', `warnbannedrecip` VARCHAR(1) NULL default 'N', `warnbadhrecip` VARCHAR(1) NULL default 'N', `newvirus_admin` varchar(64) default NULL, `virus_admin` varchar(64) default NULL, `banned_admin` varchar(64) default NULL, `bad_header_admin` varchar(64) default NULL, `spam_admin` varchar(64) default NULL, `spam_subject_tag` varchar(64) default NULL, `spam_subject_tag2` varchar(64) default NULL, `message_size_limit` int(11) unsigned default NULL, `banned_rulenames` varchar(64) default NULL, `policyd_quota_in` int(11) NOT NULL DEFAULT '-1', `policyd_quota_in_period` int(11) NOT NULL DEFAULT '24', `policyd_quota_out` int(11) NOT NULL DEFAULT '-1', `policyd_quota_out_period` int(11) NOT NULL DEFAULT '24', `policyd_greylist` ENUM( 'Y', 'N' ) NOT NULL DEFAULT 'N', `rspamd_greylisting` enum('n','y') NOT NULL DEFAULT 'n', `rspamd_spam_greylisting_level` decimal(5,2) DEFAULT NULL, `rspamd_spam_tag_level` decimal(5,2) DEFAULT NULL, `rspamd_spam_tag_method` enum('add_header','rewrite_subject') NOT NULL DEFAULT 'rewrite_subject', `rspamd_spam_kill_level` decimal(5,2) DEFAULT NULL, PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `spamfilter_users` -- CREATE TABLE `spamfilter_users` ( `id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) unsigned NOT NULL DEFAULT '0', `priority` tinyint(3) unsigned NOT NULL default '7', `policy_id` int(11) unsigned NOT NULL default '0', `email` varchar(255) NOT NULL DEFAULT '', `fullname` varchar(64) default NULL, `local` varchar(1) default NULL, PRIMARY KEY (`id`), UNIQUE KEY `email` (`email`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `spamfilter_wblist` -- CREATE TABLE `spamfilter_wblist` ( `wblist_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) NOT NULL DEFAULT '', `sys_perm_group` varchar(5) NOT NULL DEFAULT '', `sys_perm_other` varchar(5) NOT NULL DEFAULT '', `server_id` int(11) unsigned NOT NULL DEFAULT '0', `wb` enum('W','B') NOT NULL default 'W', `rid` int(11) unsigned NOT NULL DEFAULT '0', `email` varchar(255) NOT NULL DEFAULT '', `priority` tinyint(3) unsigned NOT NULL DEFAULT '0', `active` enum('y','n') NOT NULL default 'y', PRIMARY KEY (`wblist_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `support_message` -- CREATE TABLE `support_message` ( `support_message_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `recipient_id` int(11) unsigned NOT NULL default '0', `sender_id` int(11) unsigned NOT NULL default '0', `subject` varchar(255) default NULL, `message` text default NULL, `tstamp` int(11) NOT NULL default '0', PRIMARY KEY (`support_message_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_config` -- CREATE TABLE `sys_config` ( `group` varchar(64) NOT NULL DEFAULT '', `name` varchar(64) NOT NULL DEFAULT '', `value` varchar(255) NOT NULL DEFAULT '', PRIMARY KEY (`group`, `name`) ) DEFAULT CHARSET=utf8mb4; -- -------------------------------------------------------- -- -- Table structure for table `sys_cron` -- CREATE TABLE IF NOT EXISTS `sys_cron` ( `name` varchar(50) NOT NULL DEFAULT '', `last_run` datetime NULL DEFAULT NULL, `next_run` datetime NULL DEFAULT NULL, `running` tinyint(1) UNSIGNED NOT NULL DEFAULT '0', `pid` int(11) unsigned NULL DEFAULT NULL, PRIMARY KEY (`name`) ) DEFAULT CHARSET=utf8mb4; -- -------------------------------------------------------- -- -- Table structure for table `sys_datalog` -- CREATE TABLE `sys_datalog` ( `datalog_id` int(11) unsigned NOT NULL auto_increment, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `dbtable` varchar(255) NOT NULL default '', `dbidx` varchar(255) NOT NULL default '', `action` char(1) NOT NULL default '', `tstamp` int(11) NOT NULL default '0', `user` varchar(255) NOT NULL default '', `data` longtext, `status` set('pending','ok','warning','error') NOT NULL default 'ok', `error` mediumtext, `session_id` varchar(64) NOT NULL DEFAULT '', PRIMARY KEY (`datalog_id`), KEY `server_id` (`server_id`,`status`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_dbsync` -- CREATE TABLE `sys_dbsync` ( `id` int(11) unsigned NOT NULL auto_increment, `jobname` varchar(64) NOT NULL default '', `sync_interval_minutes` int(11) unsigned NOT NULL default '0', `db_type` varchar(16) NOT NULL default '', `db_host` varchar(255) NOT NULL default '', `db_name` varchar(64) NOT NULL default '', `db_username` varchar(64) NOT NULL default '', `db_password` varchar(64) NOT NULL default '', `db_tables` varchar(255) NOT NULL default 'admin,forms', `empty_datalog` int(11) unsigned NOT NULL default '0', `sync_datalog_external` int(11) unsigned NOT NULL default '0', `active` tinyint(1) NOT NULL default '1', `last_datalog_id` int(11) unsigned NOT NULL default '0', PRIMARY KEY (`id`), KEY `last_datalog_id` (`last_datalog_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_extension_grant` -- CREATE TABLE `sys_extension_grant` ( `grant_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `extension` varchar(64) NOT NULL DEFAULT '', `table_name` varchar(64) NOT NULL DEFAULT '', `privileges` varchar(64) NOT NULL DEFAULT '', PRIMARY KEY (`grant_id`), UNIQUE KEY `extension_table` (`extension`,`table_name`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1; -- -------------------------------------------------------- -- -- Table structure for table `sys_filesync` -- CREATE TABLE `sys_filesync` ( `id` int(11) unsigned NOT NULL auto_increment, `jobname` varchar(64) NOT NULL default '', `sync_interval_minutes` int(11) unsigned NOT NULL default '0', `ftp_host` varchar(255) NOT NULL default '', `ftp_path` varchar(255) NOT NULL default '', `ftp_username` varchar(64) NOT NULL default '', `ftp_password` varchar(64) NOT NULL default '', `local_path` varchar(255) NOT NULL default '', `wput_options` varchar(255) NOT NULL default '--timestamping --reupload --dont-continue', `active` tinyint(1) NOT NULL default '1', PRIMARY KEY (`id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_group` -- CREATE TABLE `sys_group` ( `groupid` int(11) unsigned NOT NULL auto_increment, `name` varchar(64) NOT NULL default '', `description` text, `client_id` int(11) unsigned NOT NULL default '0', PRIMARY KEY (`groupid`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_ini` -- CREATE TABLE `sys_ini` ( `sysini_id` int(11) unsigned NOT NULL auto_increment, `config` longtext, `default_logo` text NULL, `custom_logo` text NULL, PRIMARY KEY (`sysini_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_log` -- CREATE TABLE `sys_log` ( `syslog_id` int(11) unsigned NOT NULL auto_increment, `server_id` int(11) unsigned NOT NULL default '0', `datalog_id` int(11) unsigned NOT NULL default '0', `loglevel` tinyint(4) NOT NULL default '0', `tstamp` int(11) unsigned NOT NULL DEFAULT '0', `message` text, PRIMARY KEY (`syslog_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_message` -- CREATE TABLE IF NOT EXISTS `sys_message` ( `message_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT 0, `sys_groupid` int(11) unsigned NOT NULL DEFAULT 0, `sys_perm_user` VARCHAR(5) DEFAULT 'r', `sys_perm_group` VARCHAR(5) DEFAULT 'r', `sys_perm_other` VARCHAR(5) DEFAULT '', `message_state` enum('info','warning','error') NOT NULL DEFAULT 'info', `message_date` datetime NULL DEFAULT NULL, `message_ack` enum('y','n') NOT NULL DEFAULT 'n', `relation` varchar(255) NULL DEFAULT NULL, `message` TEXT DEFAULT NULL, PRIMARY KEY (`message_id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1; -- -------------------------------------------------------- -- -- Table structure for table `sys_remoteaction` -- CREATE TABLE `sys_remoteaction` ( `action_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `tstamp` int(11) NOT NULL DEFAULT '0', `action_type` varchar(64) NOT NULL DEFAULT '', `action_param` mediumtext, `action_state` enum('pending','ok','warning','error') NOT NULL DEFAULT 'pending', `response` mediumtext, PRIMARY KEY (`action_id`), KEY `server_id` (`server_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_session` -- CREATE TABLE `sys_session` ( `session_id` varchar(64) NOT NULL DEFAULT '', `date_created` datetime NULL DEFAULT NULL, `last_updated` datetime NULL DEFAULT NULL, `permanent` enum('n','y') NOT NULL DEFAULT 'n', `session_data` longtext, PRIMARY KEY (`session_id`), KEY `last_updated` (`last_updated`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_theme` -- CREATE TABLE IF NOT EXISTS `sys_theme` ( `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `var_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `tpl_name` varchar(32) NOT NULL DEFAULT '', `username` varchar(64) NOT NULL DEFAULT '', `logo_url` varchar(255) NOT NULL DEFAULT '', PRIMARY KEY (`var_id`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `sys_user` -- CREATE TABLE `sys_user` ( `userid` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '1' COMMENT 'Created by userid', `sys_groupid` int(11) unsigned NOT NULL default '1' COMMENT 'Created by groupid', `sys_perm_user` varchar(5) NOT NULL default 'riud', `sys_perm_group` varchar(5) NOT NULL default 'riud', `sys_perm_other` varchar(5) NOT NULL default '', `username` varchar(64) NOT NULL default '', `passwort` varchar(200) NOT NULL default '', `modules` varchar(255) NOT NULL default '', `startmodule` varchar(255) NOT NULL default '', `app_theme` varchar(32) NOT NULL default 'default', `typ` varchar(16) NOT NULL default 'user', `active` tinyint(1) NOT NULL default '1', `language` varchar(2) NOT NULL default 'en', `groups` TEXT, `default_group` int(11) unsigned NOT NULL default '0', `client_id` int(11) unsigned NOT NULL default '0', `id_rsa` text, `ssh_rsa` text, `lost_password_function` tinyint(1) NOT NULL default '1', `lost_password_hash` VARCHAR(50) NOT NULL default '', `lost_password_reqtime` DATETIME NULL default NULL, `otp_type` set('none', 'email') NOT NULL DEFAULT 'none', `otp_data` varchar(255) DEFAULT NULL, `otp_recovery` varchar(64) DEFAULT NULL, `otp_attempts` tinyint(4) NOT NULL DEFAULT 0, `last_password_change` DATE NULL DEFAULT (CURDATE()), PRIMARY KEY (`userid`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `webdav_user` -- CREATE TABLE `webdav_user` ( `webdav_user_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `parent_domain_id` int(11) unsigned NOT NULL DEFAULT '0', `username` varchar(64) DEFAULT NULL, `username_prefix` varchar(50) NOT NULL default '', `password` varchar(200) DEFAULT NULL, `active` enum('n','y') NOT NULL DEFAULT 'y', `dir` varchar(255) DEFAULT NULL, PRIMARY KEY (`webdav_user_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `web_backup` -- CREATE TABLE `web_backup` ( `backup_id` int(10) unsigned NOT NULL AUTO_INCREMENT, `server_id` int(10) unsigned NOT NULL DEFAULT '0', `parent_domain_id` int(10) unsigned NOT NULL DEFAULT '0', `backup_type` enum('web','mysql','mongodb') NOT NULL DEFAULT 'web', `backup_mode` varchar(64) NOT NULL DEFAULT '', `backup_format` varchar(64) NOT NULL DEFAULT '', `tstamp` int(10) unsigned NOT NULL DEFAULT '0', `filename` varchar(255) NOT NULL DEFAULT '', `filesize` VARCHAR(20) NOT NULL DEFAULT '', `backup_password` VARCHAR(255) NOT NULL DEFAULT '', PRIMARY KEY (`backup_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `web_database` -- CREATE TABLE `web_database` ( `database_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) unsigned NOT NULL DEFAULT '0', `parent_domain_id` int(11) unsigned NOT NULL DEFAULT '0', `type` varchar(16) NOT NULL DEFAULT 'mysql', `database_name` varchar(64) DEFAULT NULL, `database_name_prefix` varchar(50) NOT NULL default '', `database_quota` int(11) DEFAULT NULL, `quota_exceeded` enum('n','y') NOT NULL DEFAULT 'n', `last_quota_notification` date NULL default NULL, `database_user_id` int(11) unsigned DEFAULT NULL, `database_ro_user_id` int(11) unsigned DEFAULT NULL, `database_charset` varchar(64) DEFAULT NULL, `remote_access` enum('n','y') NOT NULL DEFAULT 'y', `remote_ips` text, `backup_interval` VARCHAR( 255 ) NOT NULL DEFAULT 'none', `backup_copies` INT NOT NULL DEFAULT '1', `active` enum('n','y') NOT NULL DEFAULT 'y', PRIMARY KEY (`database_id`), KEY `database_user_id` (`database_user_id`), KEY `database_ro_user_id` (`database_ro_user_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Tabellenstruktur für Tabelle `web_database_user` -- CREATE TABLE IF NOT EXISTS `web_database_user` ( `database_user_id` int(11) unsigned NOT NULL AUTO_INCREMENT, `sys_userid` int(11) unsigned NOT NULL DEFAULT '0', `sys_groupid` int(11) unsigned NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) UNSIGNED NOT NULL DEFAULT '0', `database_user` varchar(64) DEFAULT NULL, `database_user_prefix` varchar(50) NOT NULL default '', `database_password` varchar(64) DEFAULT NULL, `database_password_sha2` varchar(255) DEFAULT NULL, `database_password_mongo` varchar(32) DEFAULT NULL, `database_password_postgres` varchar(255) DEFAULT NULL, PRIMARY KEY (`database_user_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `web_domain` -- CREATE TABLE `web_domain` ( `domain_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) default NULL, `sys_perm_group` varchar(5) default NULL, `sys_perm_other` varchar(5) default NULL, `server_id` int(11) unsigned NOT NULL default '0', `ip_address` varchar(39) default NULL, `ipv6_address` VARCHAR( 255 ) default NULL, `domain` varchar(255) default NULL, `type` varchar(32) default NULL, `parent_domain_id` int(11) unsigned NOT NULL default '0', `vhost_type` varchar(32) default NULL, `document_root` varchar(255) default NULL, `web_folder` varchar(100) default NULL, `system_user` varchar(255) default NULL, `system_group` varchar(255) default NULL, `hd_quota` bigint(20) NOT NULL default '0', `traffic_quota` bigint(20) NOT NULL default '-1', `cgi` enum('n','y') NOT NULL default 'y', `ssi` enum('n','y') NOT NULL default 'y', `suexec` enum('n','y') NOT NULL default 'y', `errordocs` tinyint(1) NOT NULL default '1', `is_subdomainwww` tinyint(1) NOT NULL default '1', `subdomain` enum('none','www','*') NOT NULL default 'none', `php` varchar(32) NOT NULL default 'y', `ruby` enum('n','y') NOT NULL default 'n', `python` enum('n','y') NOT NULL default 'n', `perl` enum('n','y') NOT NULL default 'n', `redirect_type` varchar(255) default NULL, `redirect_path` varchar(255) default NULL, `seo_redirect` varchar(255) default NULL, `rewrite_to_https` ENUM('y','n') NOT NULL DEFAULT 'n', `ssl` enum('n','y') NOT NULL default 'n', `ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n', `ssl_letsencrypt_exclude` enum('n','y') NOT NULL DEFAULT 'n', `ssl_state` varchar(255) NULL, `ssl_locality` varchar(255) NULL, `ssl_organisation` varchar(255) NULL, `ssl_organisation_unit` varchar(255) NULL, `ssl_country` varchar(255) NULL, `ssl_domain` varchar(255) NULL, `ssl_request` mediumtext NULL, `ssl_cert` mediumtext NULL, `ssl_bundle` mediumtext NULL, `ssl_key` mediumtext NULL, `ssl_action` varchar(16) NULL, `stats_password` varchar(255) default NULL, `stats_type` varchar(255) default 'awstats', `allow_override` varchar(255) NOT NULL default 'All', `apache_directives` mediumtext NULL DEFAULT NULL, `nginx_directives` mediumtext NULL DEFAULT NULL, `php_fpm_use_socket` ENUM('n','y') NOT NULL DEFAULT 'y', `php_fpm_chroot` enum('n','y') NOT NULL DEFAULT 'n', `pm` enum('static','dynamic','ondemand') NOT NULL DEFAULT 'ondemand', `pm_max_children` int(11) NOT NULL DEFAULT '10', `pm_start_servers` int(11) NOT NULL DEFAULT '2', `pm_min_spare_servers` int(11) NOT NULL DEFAULT '1', `pm_max_spare_servers` int(11) NOT NULL DEFAULT '5', `pm_process_idle_timeout` int(11) NOT NULL DEFAULT '10', `pm_max_requests` int(11) NOT NULL DEFAULT '0', `php_open_basedir` mediumtext, `custom_php_ini` mediumtext, `backup_interval` VARCHAR( 255 ) NOT NULL DEFAULT 'none', `backup_copies` INT NOT NULL DEFAULT '1', `backup_format_web` VARCHAR( 255 ) NOT NULL default 'default', `backup_format_db` VARCHAR( 255 ) NOT NULL default 'gzip', `backup_encrypt` enum('n','y') NOT NULL DEFAULT 'n', `backup_password` VARCHAR( 255 ) NOT NULL DEFAULT '', `backup_excludes` mediumtext, `active` enum('n','y') NOT NULL default 'y', `traffic_quota_lock` enum('n','y') NOT NULL default 'n', `proxy_directives` mediumtext, `last_quota_notification` date NULL default NULL, `rewrite_rules` mediumtext, `added_date` date NULL DEFAULT NULL, `added_by` varchar(255) DEFAULT NULL, `directive_snippets_id` int(11) unsigned NOT NULL default '0', `enable_pagespeed` ENUM('y','n') NOT NULL DEFAULT 'n', `http_port` int(11) unsigned NOT NULL DEFAULT '80', `https_port` int(11) unsigned NOT NULL DEFAULT '443', `folder_directive_snippets` text, `log_retention` int(11) NOT NULL DEFAULT '10', `proxy_protocol` enum('n','y') NOT NULL default 'n', `server_php_id` INT(11) UNSIGNED NOT NULL DEFAULT 0, `jailkit_chroot_app_sections` mediumtext NULL DEFAULT NULL, `jailkit_chroot_app_programs` mediumtext NULL DEFAULT NULL, `delete_unused_jailkit` enum('n','y') NOT NULL default 'n', `last_jailkit_update` date NULL DEFAULT NULL, `last_jailkit_hash` varchar(255) DEFAULT NULL, `disable_symlinknotowner` enum('n','y') NOT NULL default 'n', PRIMARY KEY (`domain_id`), UNIQUE KEY `serverdomain` ( `server_id` , `ip_address`, `domain` ) ) ENGINE=InnoDB ROW_FORMAT=DYNAMIC DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `web_folder` -- CREATE TABLE IF NOT EXISTS `web_folder` ( `web_folder_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `parent_domain_id` int(11) NOT NULL DEFAULT '0', `path` varchar(255) DEFAULT NULL, `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`web_folder_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -- Dumping data for table `web_folder` -- -- -------------------------------------------------------- -- -- Table structure for table `web_folder_user` -- CREATE TABLE IF NOT EXISTS `web_folder_user` ( `web_folder_user_id` bigint(20) NOT NULL AUTO_INCREMENT, `sys_userid` int(11) NOT NULL DEFAULT '0', `sys_groupid` int(11) NOT NULL DEFAULT '0', `sys_perm_user` varchar(5) DEFAULT NULL, `sys_perm_group` varchar(5) DEFAULT NULL, `sys_perm_other` varchar(5) DEFAULT NULL, `server_id` int(11) NOT NULL DEFAULT '0', `web_folder_id` int(11) NOT NULL DEFAULT '0', `username` varchar(255) DEFAULT NULL, `password` varchar(255) DEFAULT NULL, `active` varchar(255) NOT NULL DEFAULT 'y', PRIMARY KEY (`web_folder_user_id`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -- Dumping data for table `web_folder_user` -- -- -------------------------------------------------------- -- -- Table structure for table `web_traffic` -- CREATE TABLE `web_traffic` ( `hostname` varchar(255) NOT NULL DEFAULT '', `traffic_date` date NULL DEFAULT NULL, `traffic_bytes` bigint(32) unsigned NOT NULL default '0', UNIQUE KEY (`hostname`,`traffic_date`) ) DEFAULT CHARSET=utf8mb4 ; -- -------------------------------------------------------- -- -- Table structure for table `xmpp_domain` -- CREATE TABLE `xmpp_domain` ( `domain_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `domain` varchar(255) NOT NULL default '', `management_method` ENUM( 'normal', 'maildomain' ) NOT NULL default 'normal', `public_registration` ENUM( 'n', 'y' ) NOT NULL default 'n', `registration_url` varchar(255) NOT NULL DEFAULT '', `registration_message` varchar(255) NOT NULL DEFAULT '', `domain_admins` text, `use_pubsub` enum('n','y') NOT NULL DEFAULT 'n', `use_proxy` enum('n','y') NOT NULL DEFAULT 'n', `use_anon_host` enum('n','y') NOT NULL DEFAULT 'n', `use_vjud` enum('n','y') NOT NULL DEFAULT 'n', `vjud_opt_mode` enum('in', 'out') NOT NULL DEFAULT 'in', `use_muc_host` enum('n','y') NOT NULL DEFAULT 'n', `muc_name` varchar(30) NOT NULL DEFAULT '', `muc_restrict_room_creation` enum('n', 'y', 'm') NOT NULL DEFAULT 'm', `muc_admins` text, `use_pastebin` enum('n','y') NOT NULL DEFAULT 'n', `pastebin_expire_after` int(3) NOT NULL DEFAULT 48, `pastebin_trigger` varchar(10) NOT NULL DEFAULT '!paste', `use_http_archive` enum('n','y') NOT NULL DEFAULT 'n', `http_archive_show_join` enum('n', 'y') NOT NULL DEFAULT 'n', `http_archive_show_status` enum('n', 'y') NOT NULL DEFAULT 'n', `use_status_host` enum('n','y') NOT NULL DEFAULT 'n', `ssl_state` varchar(255) NULL, `ssl_locality` varchar(255) NULL, `ssl_organisation` varchar(255) NULL, `ssl_organisation_unit` varchar(255) NULL, `ssl_country` varchar(255) NULL, `ssl_email` varchar(255) NULL, `ssl_request` mediumtext NULL, `ssl_cert` mediumtext NULL, `ssl_bundle` mediumtext NULL, `ssl_key` mediumtext NULL, `ssl_action` varchar(16) NULL, `active` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`domain_id`), KEY `server_id` (`server_id`,`domain`), KEY `domain_active` (`domain`,`active`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `xmpp_user` -- CREATE TABLE `xmpp_user` ( `xmppuser_id` int(11) unsigned NOT NULL auto_increment, `sys_userid` int(11) unsigned NOT NULL default '0', `sys_groupid` int(11) unsigned NOT NULL default '0', `sys_perm_user` varchar(5) NOT NULL default '', `sys_perm_group` varchar(5) NOT NULL default '', `sys_perm_other` varchar(5) NOT NULL default '', `server_id` int(11) unsigned NOT NULL default '0', `jid` varchar(255) NOT NULL default '', `password` varchar(255) NOT NULL default '', `active` enum('n','y') NOT NULL DEFAULT 'n', PRIMARY KEY (`xmppuser_id`), KEY `server_id` (`server_id`,`jid`), KEY `jid_active` (`jid`,`active`) ) DEFAULT CHARSET=utf8mb4 AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -------------------------------------------------------- -- -------------------------------------------------------- -- DB-DATA -- -------------------------------------------------------- -- -------------------------------------------------------- -- -- Dumping data for table `aps_settings` -- INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(1, 'ignore-php-extension', ''); INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(2, 'ignore-php-configuration', ''); INSERT INTO `aps_settings` (`id`, `name`, `value`) VALUES(3, 'ignore-webserver-module', ''); -- -------------------------------------------------------- -- -- Dumping data for table `country` -- INSERT INTO `country` (`iso`, `name`, `printable_name`, `iso3`, `numcode`, `eu`) VALUES ('AF', 'AFGHANISTAN', 'Afghanistan', 'AFG', 4, 'n'), ('AL', 'ALBANIA', 'Albania', 'ALB', 8, 'n'), ('DZ', 'ALGERIA', 'Algeria', 'DZA', 12, 'n'), ('AS', 'AMERICAN SAMOA', 'American Samoa', 'ASM', 16, 'n'), ('AD', 'ANDORRA', 'Andorra', 'AND', 20, 'n'), ('AO', 'ANGOLA', 'Angola', 'AGO', 24, 'n'), ('AI', 'ANGUILLA', 'Anguilla', 'AIA', 660, 'n'), ('AQ', 'ANTARCTICA', 'Antarctica', NULL, NULL, 'n'), ('AG', 'ANTIGUA AND BARBUDA', 'Antigua and Barbuda', 'ATG', 28, 'n'), ('AR', 'ARGENTINA', 'Argentina', 'ARG', 32, 'n'), ('AM', 'ARMENIA', 'Armenia', 'ARM', 51, 'n'), ('AW', 'ARUBA', 'Aruba', 'ABW', 533, 'n'), ('AU', 'AUSTRALIA', 'Australia', 'AUS', 36, 'n'), ('AT', 'AUSTRIA', 'Austria', 'AUT', 40, 'y'), ('AZ', 'AZERBAIJAN', 'Azerbaijan', 'AZE', 31, 'n'), ('BS', 'BAHAMAS', 'Bahamas', 'BHS', 44, 'n'), ('BH', 'BAHRAIN', 'Bahrain', 'BHR', 48, 'n'), ('BD', 'BANGLADESH', 'Bangladesh', 'BGD', 50, 'n'), ('BB', 'BARBADOS', 'Barbados', 'BRB', 52, 'n'), ('BY', 'BELARUS', 'Belarus', 'BLR', 112, 'n'), ('BE', 'BELGIUM', 'Belgium', 'BEL', 56, 'y'), ('BZ', 'BELIZE', 'Belize', 'BLZ', 84, 'n'), ('BJ', 'BENIN', 'Benin', 'BEN', 204, 'n'), ('BM', 'BERMUDA', 'Bermuda', 'BMU', 60, 'n'), ('BT', 'BHUTAN', 'Bhutan', 'BTN', 64, 'n'), ('BO', 'BOLIVIA', 'Bolivia', 'BOL', 68, 'n'), ('BA', 'BOSNIA AND HERZEGOVINA', 'Bosnia and Herzegovina', 'BIH', 70, 'n'), ('BW', 'BOTSWANA', 'Botswana', 'BWA', 72, 'n'), ('BV', 'BOUVET ISLAND', 'Bouvet Island', NULL, NULL, 'n'), ('BR', 'BRAZIL', 'Brazil', 'BRA', 76, 'n'), ('IO', 'BRITISH INDIAN OCEAN TERRITORY', 'British Indian Ocean Territory', NULL, NULL, 'n'), ('BN', 'BRUNEI DARUSSALAM', 'Brunei Darussalam', 'BRN', 96, 'n'), ('BG', 'BULGARIA', 'Bulgaria', 'BGR', 100, 'y'), ('BF', 'BURKINA FASO', 'Burkina Faso', 'BFA', 854, 'n'), ('BI', 'BURUNDI', 'Burundi', 'BDI', 108, 'n'), ('KH', 'CAMBODIA', 'Cambodia', 'KHM', 116, 'n'), ('CM', 'CAMEROON', 'Cameroon', 'CMR', 120, 'n'), ('CA', 'CANADA', 'Canada', 'CAN', 124, 'n'), ('CV', 'CAPE VERDE', 'Cape Verde', 'CPV', 132, 'n'), ('KY', 'CAYMAN ISLANDS', 'Cayman Islands', 'CYM', 136, 'n'), ('CF', 'CENTRAL AFRICAN REPUBLIC', 'Central African Republic', 'CAF', 140, 'n'), ('TD', 'CHAD', 'Chad', 'TCD', 148, 'n'), ('CL', 'CHILE', 'Chile', 'CHL', 152, 'n'), ('CN', 'CHINA', 'China', 'CHN', 156, 'n'), ('CX', 'CHRISTMAS ISLAND', 'Christmas Island', NULL, NULL, 'n'), ('CC', 'COCOS (KEELING) ISLANDS', 'Cocos (Keeling) Islands', NULL, NULL, 'n'), ('CO', 'COLOMBIA', 'Colombia', 'COL', 170, 'n'), ('KM', 'COMOROS', 'Comoros', 'COM', 174, 'n'), ('CG', 'CONGO', 'Congo', 'COG', 178, 'n'), ('CD', 'CONGO, THE DEMOCRATIC REPUBLIC OF THE', 'Congo, the Democratic Republic of the', 'COD', 180, 'n'), ('CK', 'COOK ISLANDS', 'Cook Islands', 'COK', 184, 'n'), ('CR', 'COSTA RICA', 'Costa Rica', 'CRI', 188, 'n'), ('CI', 'COTE D''IVOIRE', 'Cote D''Ivoire', 'CIV', 384, 'n'), ('HR', 'CROATIA', 'Croatia', 'HRV', 191, 'y'), ('CU', 'CUBA', 'Cuba', 'CUB', 192, 'n'), ('CY', 'CYPRUS', 'Cyprus', 'CYP', 196, 'y'), ('CZ', 'CZECH REPUBLIC', 'Czech Republic', 'CZE', 203, 'y'), ('DK', 'DENMARK', 'Denmark', 'DNK', 208, 'y'), ('DJ', 'DJIBOUTI', 'Djibouti', 'DJI', 262, 'n'), ('DM', 'DOMINICA', 'Dominica', 'DMA', 212, 'n'), ('DO', 'DOMINICAN REPUBLIC', 'Dominican Republic', 'DOM', 214, 'n'), ('EC', 'ECUADOR', 'Ecuador', 'ECU', 218, 'n'), ('EG', 'EGYPT', 'Egypt', 'EGY', 818, 'n'), ('SV', 'EL SALVADOR', 'El Salvador', 'SLV', 222, 'n'), ('GQ', 'EQUATORIAL GUINEA', 'Equatorial Guinea', 'GNQ', 226, 'n'), ('ER', 'ERITREA', 'Eritrea', 'ERI', 232, 'n'), ('EE', 'ESTONIA', 'Estonia', 'EST', 233, 'y'), ('ET', 'ETHIOPIA', 'Ethiopia', 'ETH', 231, 'n'), ('FK', 'FALKLAND ISLANDS (MALVINAS)', 'Falkland Islands (Malvinas)', 'FLK', 238, 'n'), ('FO', 'FAROE ISLANDS', 'Faroe Islands', 'FRO', 234, 'n'), ('FJ', 'FIJI', 'Fiji', 'FJI', 242, 'n'), ('FI', 'FINLAND', 'Finland', 'FIN', 246, 'y'), ('FR', 'FRANCE', 'France', 'FRA', 250, 'y'), ('GF', 'FRENCH GUIANA', 'French Guiana', 'GUF', 254, 'n'), ('PF', 'FRENCH POLYNESIA', 'French Polynesia', 'PYF', 258, 'n'), ('TF', 'FRENCH SOUTHERN TERRITORIES', 'French Southern Territories', NULL, NULL, 'n'), ('GA', 'GABON', 'Gabon', 'GAB', 266, 'n'), ('GM', 'GAMBIA', 'Gambia', 'GMB', 270, 'n'), ('GE', 'GEORGIA', 'Georgia', 'GEO', 268, 'n'), ('DE', 'GERMANY', 'Germany', 'DEU', 276, 'y'), ('GH', 'GHANA', 'Ghana', 'GHA', 288, 'n'), ('GI', 'GIBRALTAR', 'Gibraltar', 'GIB', 292, 'n'), ('GR', 'GREECE', 'Greece', 'GRC', 300, 'y'), ('GL', 'GREENLAND', 'Greenland', 'GRL', 304, 'n'), ('GD', 'GRENADA', 'Grenada', 'GRD', 308, 'n'), ('GP', 'GUADELOUPE', 'Guadeloupe', 'GLP', 312, 'n'), ('GU', 'GUAM', 'Guam', 'GUM', 316, 'n'), ('GT', 'GUATEMALA', 'Guatemala', 'GTM', 320, 'n'), ('GN', 'GUINEA', 'Guinea', 'GIN', 324, 'n'), ('GW', 'GUINEA-BISSAU', 'Guinea-Bissau', 'GNB', 624, 'n'), ('GY', 'GUYANA', 'Guyana', 'GUY', 328, 'n'), ('HT', 'HAITI', 'Haiti', 'HTI', 332, 'n'), ('HM', 'HEARD ISLAND AND MCDONALD ISLANDS', 'Heard Island and Mcdonald Islands', NULL, NULL, 'n'), ('VA', 'HOLY SEE (VATICAN CITY STATE)', 'Holy See (Vatican City State)', 'VAT', 336, 'n'), ('HN', 'HONDURAS', 'Honduras', 'HND', 340, 'n'), ('HK', 'HONG KONG', 'Hong Kong', 'HKG', 344, 'n'), ('HU', 'HUNGARY', 'Hungary', 'HUN', 348, 'y'), ('IS', 'ICELAND', 'Iceland', 'ISL', 352, 'n'), ('IN', 'INDIA', 'India', 'IND', 356, 'n'), ('ID', 'INDONESIA', 'Indonesia', 'IDN', 360, 'n'), ('IR', 'IRAN, ISLAMIC REPUBLIC OF', 'Iran, Islamic Republic of', 'IRN', 364, 'n'), ('IQ', 'IRAQ', 'Iraq', 'IRQ', 368, 'n'), ('IE', 'IRELAND', 'Ireland', 'IRL', 372, 'y'), ('IL', 'ISRAEL', 'Israel', 'ISR', 376, 'n'), ('IT', 'ITALY', 'Italy', 'ITA', 380, 'y'), ('JM', 'JAMAICA', 'Jamaica', 'JAM', 388, 'n'), ('JP', 'JAPAN', 'Japan', 'JPN', 392, 'n'), ('JO', 'JORDAN', 'Jordan', 'JOR', 400, 'n'), ('KZ', 'KAZAKHSTAN', 'Kazakhstan', 'KAZ', 398, 'n'), ('KE', 'KENYA', 'Kenya', 'KEN', 404, 'n'), ('KI', 'KIRIBATI', 'Kiribati', 'KIR', 296, 'n'), ('KP', 'KOREA, DEMOCRATIC PEOPLE''S REPUBLIC OF', 'Korea, Democratic People''s Republic of', 'PRK', 408, 'n'), ('KR', 'KOREA, REPUBLIC OF', 'Korea, Republic of', 'KOR', 410, 'n'), ('KW', 'KUWAIT', 'Kuwait', 'KWT', 414, 'n'), ('KG', 'KYRGYZSTAN', 'Kyrgyzstan', 'KGZ', 417, 'n'), ('LA', 'LAO PEOPLE''S DEMOCRATIC REPUBLIC', 'Lao People''s Democratic Republic', 'LAO', 418, 'n'), ('LV', 'LATVIA', 'Latvia', 'LVA', 428, 'y'), ('LB', 'LEBANON', 'Lebanon', 'LBN', 422, 'n'), ('LS', 'LESOTHO', 'Lesotho', 'LSO', 426, 'n'), ('LR', 'LIBERIA', 'Liberia', 'LBR', 430, 'n'), ('LY', 'LIBYAN ARAB JAMAHIRIYA', 'Libyan Arab Jamahiriya', 'LBY', 434, 'n'), ('LI', 'LIECHTENSTEIN', 'Liechtenstein', 'LIE', 438, 'n'), ('LT', 'LITHUANIA', 'Lithuania', 'LTU', 440, 'y'), ('LU', 'LUXEMBOURG', 'Luxembourg', 'LUX', 442, 'y'), ('MO', 'MACAO', 'Macao', 'MAC', 446, 'n'), ('MK', 'MACEDONIA, THE FORMER YUGOSLAV REPUBLIC OF', 'Macedonia, the Former Yugoslav Republic of', 'MKD', 807, 'n'), ('MG', 'MADAGASCAR', 'Madagascar', 'MDG', 450, 'n'), ('MW', 'MALAWI', 'Malawi', 'MWI', 454, 'n'), ('MY', 'MALAYSIA', 'Malaysia', 'MYS', 458, 'n'), ('MV', 'MALDIVES', 'Maldives', 'MDV', 462, 'n'), ('ML', 'MALI', 'Mali', 'MLI', 466, 'n'), ('MT', 'MALTA', 'Malta', 'MLT', 470, 'y'), ('MH', 'MARSHALL ISLANDS', 'Marshall Islands', 'MHL', 584, 'n'), ('MQ', 'MARTINIQUE', 'Martinique', 'MTQ', 474, 'n'), ('MR', 'MAURITANIA', 'Mauritania', 'MRT', 478, 'n'), ('MU', 'MAURITIUS', 'Mauritius', 'MUS', 480, 'n'), ('YT', 'MAYOTTE', 'Mayotte', NULL, NULL, 'n'), ('MX', 'MEXICO', 'Mexico', 'MEX', 484, 'n'), ('FM', 'MICRONESIA, FEDERATED STATES OF', 'Micronesia, Federated States of', 'FSM', 583, 'n'), ('MD', 'MOLDOVA, REPUBLIC OF', 'Moldova, Republic of', 'MDA', 498, 'n'), ('MC', 'MONACO', 'Monaco', 'MCO', 492, 'n'), ('MN', 'MONGOLIA', 'Mongolia', 'MNG', 496, 'n'), ('MS', 'MONTSERRAT', 'Montserrat', 'MSR', 500, 'n'), ('MA', 'MOROCCO', 'Morocco', 'MAR', 504, 'n'), ('MZ', 'MOZAMBIQUE', 'Mozambique', 'MOZ', 508, 'n'), ('MM', 'MYANMAR', 'Myanmar', 'MMR', 104, 'n'), ('NA', 'NAMIBIA', 'Namibia', 'NAM', 516, 'n'), ('NR', 'NAURU', 'Nauru', 'NRU', 520, 'n'), ('NP', 'NEPAL', 'Nepal', 'NPL', 524, 'n'), ('NL', 'NETHERLANDS', 'Netherlands', 'NLD', 528, 'y'), ('AN', 'NETHERLANDS ANTILLES', 'Netherlands Antilles', 'ANT', 530, 'n'), ('NC', 'NEW CALEDONIA', 'New Caledonia', 'NCL', 540, 'n'), ('NZ', 'NEW ZEALAND', 'New Zealand', 'NZL', 554, 'n'), ('NI', 'NICARAGUA', 'Nicaragua', 'NIC', 558, 'n'), ('NE', 'NIGER', 'Niger', 'NER', 562, 'n'), ('NG', 'NIGERIA', 'Nigeria', 'NGA', 566, 'n'), ('NU', 'NIUE', 'Niue', 'NIU', 570, 'n'), ('NF', 'NORFOLK ISLAND', 'Norfolk Island', 'NFK', 574, 'n'), ('MP', 'NORTHERN MARIANA ISLANDS', 'Northern Mariana Islands', 'MNP', 580, 'n'), ('NO', 'NORWAY', 'Norway', 'NOR', 578, 'n'), ('OM', 'OMAN', 'Oman', 'OMN', 512, 'n'), ('PK', 'PAKISTAN', 'Pakistan', 'PAK', 586, 'n'), ('PW', 'PALAU', 'Palau', 'PLW', 585, 'n'), ('PS', 'PALESTINIAN TERRITORY, OCCUPIED', 'Palestinian Territory, Occupied', NULL, NULL, 'n'), ('PA', 'PANAMA', 'Panama', 'PAN', 591, 'n'), ('PG', 'PAPUA NEW GUINEA', 'Papua New Guinea', 'PNG', 598, 'n'), ('PY', 'PARAGUAY', 'Paraguay', 'PRY', 600, 'n'), ('PE', 'PERU', 'Peru', 'PER', 604, 'n'), ('PH', 'PHILIPPINES', 'Philippines', 'PHL', 608, 'n'), ('PN', 'PITCAIRN', 'Pitcairn', 'PCN', 612, 'n'), ('PL', 'POLAND', 'Poland', 'POL', 616, 'y'), ('PT', 'PORTUGAL', 'Portugal', 'PRT', 620, 'y'), ('PR', 'PUERTO RICO', 'Puerto Rico', 'PRI', 630, 'n'), ('QA', 'QATAR', 'Qatar', 'QAT', 634, 'n'), ('RE', 'REUNION', 'Reunion', 'REU', 638, 'n'), ('RO', 'ROMANIA', 'Romania', 'ROM', 642, 'y'), ('RU', 'RUSSIAN FEDERATION', 'Russian Federation', 'RUS', 643, 'n'), ('RW', 'RWANDA', 'Rwanda', 'RWA', 646, 'n'), ('SH', 'SAINT HELENA', 'Saint Helena', 'SHN', 654, 'n'), ('KN', 'SAINT KITTS AND NEVIS', 'Saint Kitts and Nevis', 'KNA', 659, 'n'), ('LC', 'SAINT LUCIA', 'Saint Lucia', 'LCA', 662, 'n'), ('PM', 'SAINT PIERRE AND MIQUELON', 'Saint Pierre and Miquelon', 'SPM', 666, 'n'), ('VC', 'SAINT VINCENT AND THE GRENADINES', 'Saint Vincent and the Grenadines', 'VCT', 670, 'n'), ('WS', 'SAMOA', 'Samoa', 'WSM', 882, 'n'), ('SM', 'SAN MARINO', 'San Marino', 'SMR', 674, 'n'), ('ST', 'SAO TOME AND PRINCIPE', 'Sao Tome and Principe', 'STP', 678, 'n'), ('SA', 'SAUDI ARABIA', 'Saudi Arabia', 'SAU', 682, 'n'), ('SN', 'SENEGAL', 'Senegal', 'SEN', 686, 'n'), ('RS', 'SERBIA', 'Serbia', 'SRB', 381, 'n'), ('SC', 'SEYCHELLES', 'Seychelles', 'SYC', 690, 'n'), ('SL', 'SIERRA LEONE', 'Sierra Leone', 'SLE', 694, 'n'), ('SG', 'SINGAPORE', 'Singapore', 'SGP', 702, 'n'), ('SK', 'SLOVAKIA', 'Slovakia', 'SVK', 703, 'y'), ('SI', 'SLOVENIA', 'Slovenia', 'SVN', 705, 'y'), ('SB', 'SOLOMON ISLANDS', 'Solomon Islands', 'SLB', 90, 'n'), ('SO', 'SOMALIA', 'Somalia', 'SOM', 706, 'n'), ('ZA', 'SOUTH AFRICA', 'South Africa', 'ZAF', 710, 'n'), ('GS', 'SOUTH GEORGIA AND THE SOUTH SANDWICH ISLANDS', 'South Georgia and the South Sandwich Islands', NULL, NULL, 'n'), ('ES', 'SPAIN', 'Spain', 'ESP', 724, 'y'), ('LK', 'SRI LANKA', 'Sri Lanka', 'LKA', 144, 'n'), ('SD', 'SUDAN', 'Sudan', 'SDN', 736, 'n'), ('SR', 'SURINAME', 'Suriname', 'SUR', 740, 'n'), ('SJ', 'SVALBARD AND JAN MAYEN', 'Svalbard and Jan Mayen', 'SJM', 744, 'n'), ('SZ', 'SWAZILAND', 'Swaziland', 'SWZ', 748, 'n'), ('SE', 'SWEDEN', 'Sweden', 'SWE', 752, 'y'), ('CH', 'SWITZERLAND', 'Switzerland', 'CHE', 756, 'n'), ('SY', 'SYRIAN ARAB REPUBLIC', 'Syrian Arab Republic', 'SYR', 760, 'n'), ('TW', 'TAIWAN, PROVINCE OF CHINA', 'Taiwan, Province of China', 'TWN', 158, 'n'), ('TJ', 'TAJIKISTAN', 'Tajikistan', 'TJK', 762, 'n'), ('TZ', 'TANZANIA, UNITED REPUBLIC OF', 'Tanzania, United Republic of', 'TZA', 834, 'n'), ('TH', 'THAILAND', 'Thailand', 'THA', 764, 'n'), ('TL', 'TIMOR-LESTE', 'Timor-Leste', NULL, NULL, 'n'), ('TG', 'TOGO', 'Togo', 'TGO', 768, 'n'), ('TK', 'TOKELAU', 'Tokelau', 'TKL', 772, 'n'), ('TO', 'TONGA', 'Tonga', 'TON', 776, 'n'), ('TT', 'TRINIDAD AND TOBAGO', 'Trinidad and Tobago', 'TTO', 780, 'n'), ('TN', 'TUNISIA', 'Tunisia', 'TUN', 788, 'n'), ('TR', 'TURKEY', 'Turkey', 'TUR', 792, 'n'), ('TM', 'TURKMENISTAN', 'Turkmenistan', 'TKM', 795, 'n'), ('TC', 'TURKS AND CAICOS ISLANDS', 'Turks and Caicos Islands', 'TCA', 796, 'n'), ('TV', 'TUVALU', 'Tuvalu', 'TUV', 798, 'n'), ('UG', 'UGANDA', 'Uganda', 'UGA', 800, 'n'), ('UA', 'UKRAINE', 'Ukraine', 'UKR', 804, 'n'), ('AE', 'UNITED ARAB EMIRATES', 'United Arab Emirates', 'ARE', 784, 'n'), ('GB', 'UNITED KINGDOM', 'United Kingdom', 'GBR', 826, 'n'), ('US', 'UNITED STATES', 'United States', 'USA', 840, 'n'), ('UM', 'UNITED STATES MINOR OUTLYING ISLANDS', 'United States Minor Outlying Islands', NULL, NULL, 'n'), ('UY', 'URUGUAY', 'Uruguay', 'URY', 858, 'n'), ('UZ', 'UZBEKISTAN', 'Uzbekistan', 'UZB', 860, 'n'), ('VU', 'VANUATU', 'Vanuatu', 'VUT', 548, 'n'), ('VE', 'VENEZUELA', 'Venezuela', 'VEN', 862, 'n'), ('VN', 'VIET NAM', 'Viet Nam', 'VNM', 704, 'n'), ('VG', 'VIRGIN ISLANDS, BRITISH', 'Virgin Islands, British', 'VGB', 92, 'n'), ('VI', 'VIRGIN ISLANDS, U.S.', 'Virgin Islands, U.s.', 'VIR', 850, 'n'), ('WF', 'WALLIS AND FUTUNA', 'Wallis and Futuna', 'WLF', 876, 'n'), ('EH', 'WESTERN SAHARA', 'Western Sahara', 'ESH', 732, 'n'), ('YE', 'YEMEN', 'Yemen', 'YEM', 887, 'n'), ('ZM', 'ZAMBIA', 'Zambia', 'ZMB', 894, 'n'), ('ZW', 'ZIMBABWE', 'Zimbabwe', 'ZWE', 716, 'n'), ('ME', 'MONTENEGRO', 'Montenegro', 'MNE', 382, 'n'); -- -------------------------------------------------------- -- -- Dumping data for table `dns_template` -- INSERT INTO `dns_template` (`template_id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `name`, `fields`, `template`, `visible`) VALUES (1, 1, 1, 'riud', 'riud', '', 'Default', 'DOMAIN,IP,NS1,NS2,EMAIL,DKIM,DNSSEC', '[ZONE]\norigin={DOMAIN}.\nns={NS1}.\nmbox={EMAIL}.\nrefresh=7200\nretry=540\nexpire=604800\nminimum=3600\nttl=3600\nxfer=\nalso_notify=\ndnssec_wanted=N\ndnssec_algo=ECDSAP256SHA256\n\n[DNS_RECORDS]\nA|{DOMAIN}.|{IP}|0|3600\nA|www|{IP}|0|3600\nA|mail|{IP}|0|3600\nNS|{DOMAIN}.|{NS1}.|0|3600\nNS|{DOMAIN}.|{NS2}.|0|3600\nMX|{DOMAIN}.|mail.{DOMAIN}.|10|3600\nTXT|{DOMAIN}.|v=spf1 mx a ~all|0|3600', 'y'); -- -------------------------------------------------------- -- -- Dumping data for table `help_faq` -- INSERT INTO `help_faq` VALUES (1,1,0,'I would like to know ...','Yes, of course.',1,1,'riud','riud','r'); -- -------------------------------------------------------- -- -- Dumping data for table `help_faq_sections` -- INSERT INTO `help_faq_sections` VALUES (1,'General',0,NULL,NULL,NULL,NULL,NULL); -- -------------------------------------------------------- -- -- Dumping data for table `spamfilter_policy` -- INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(1, 1, 0, 'riud', 'riud', 'r', 'Non-paying', 'N', 'N', 'N', 'N', 'Y', 'Y', 'Y', 'N', 'Y', '', '', '', '', '', '', 3, 7, 10, 0, 0, '', '', '', '', 'N', 'N', 'N', '', '', '', '', '', '', '', 0, '', 'n', 6.00, 8.00, 'rewrite_subject', 12.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(2, 1, 0, 'riud', 'riud', 'r', 'Uncensored', 'Y', 'Y', 'Y', 'Y', 'N', 'N', 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, 3, 999, 999, NULL, NULL, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'n', 999.00, 999.00, 'rewrite_subject', 999.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(3, 1, 0, 'riud', 'riud', 'r', 'Wants all spam', 'N', 'Y', 'N', 'N', 'N', 'N', 'N', 'N', 'Y', NULL, NULL, NULL, NULL, NULL, NULL, 3, 999, 999, NULL, NULL, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'n', 999.00, 999.00, 'rewrite_subject', 999.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(4, 1, 0, 'riud', 'riud', 'r', 'Wants viruses', 'Y', 'N', 'Y', 'Y', 'N', 'N', 'N', 'N', 'Y', NULL, NULL, NULL, NULL, NULL, NULL, 3, 6.9, 6.9, NULL, NULL, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'y', 4.00, 6.00, 'rewrite_subject', 10.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(5, 1, 0, 'riud', 'riud', 'r', 'Normal', 'N', 'N', 'N', 'N', 'N', 'N', 'N', 'N', 'Y', '', '', '', '', '', '', 1, 4.5, 50, 0, 0, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, '', '***SPAM***', NULL, NULL, 'y', 4.00, 6.00, 'rewrite_subject', 10.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(6, 1, 0, 'riud', 'riud', 'r', 'Trigger happy', 'N', 'N', 'N', 'N', 'N', 'N', 'N', 'N', 'Y', NULL, NULL, NULL, NULL, NULL, NULL, 3, 5, 5, NULL, NULL, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'y', 2.00, 4.00, 'rewrite_subject', 8.00); INSERT INTO `spamfilter_policy` (`id`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `policy_name`, `virus_lover`, `spam_lover`, `banned_files_lover`, `bad_header_lover`, `bypass_virus_checks`, `bypass_spam_checks`, `bypass_banned_checks`, `bypass_header_checks`, `spam_modifies_subj`, `virus_quarantine_to`, `spam_quarantine_to`, `banned_quarantine_to`, `bad_header_quarantine_to`, `clean_quarantine_to`, `other_quarantine_to`, `spam_tag_level`, `spam_tag2_level`, `spam_kill_level`, `spam_dsn_cutoff_level`, `spam_quarantine_cutoff_level`, `addr_extension_virus`, `addr_extension_spam`, `addr_extension_banned`, `addr_extension_bad_header`, `warnvirusrecip`, `warnbannedrecip`, `warnbadhrecip`, `newvirus_admin`, `virus_admin`, `banned_admin`, `bad_header_admin`, `spam_admin`, `spam_subject_tag`, `spam_subject_tag2`, `message_size_limit`, `banned_rulenames`, `rspamd_greylisting`, `rspamd_spam_greylisting_level`, `rspamd_spam_tag_level`, `rspamd_spam_tag_method`, `rspamd_spam_kill_level`) VALUES(7, 1, 0, 'riud', 'riud', 'r', 'Permissive', 'N', 'N', 'N', 'Y', 'N', 'N', 'N', 'N', 'Y', NULL, NULL, NULL, NULL, NULL, NULL, 3, 10, 20, NULL, NULL, NULL, NULL, NULL, NULL, 'N', 'N', 'N', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'n', 7.00, 10.00, 'rewrite_subject', 20.00); -- -------------------------------------------------------- -- -- Dumping data for table `sys_group` -- INSERT INTO `sys_group` (`groupid`, `name`, `description`, `client_id`) VALUES (1, 'admin', 'Administrators group', 0); -- -------------------------------------------------------- -- -- Dumping data for table `sys_ini` -- INSERT INTO `sys_ini` (`sysini_id`, `config`, `default_logo`, `custom_logo`) VALUES (1, '', 'data:image/png;base64,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', ''); -- -------------------------------------------------------- -- -- Dumping data for table `sys_user` -- INSERT INTO `sys_theme` (`var_id`, `tpl_name`, `username`, `logo_url`) VALUES (NULL, 'default', 'global', 'themes/default/images/header_logo.png'); INSERT INTO `sys_theme` (`var_id`, `tpl_name`, `username`, `logo_url`) VALUES (NULL, 'default-v2', 'global', 'themes/default-v2/images/header_logo.png'); -- -------------------------------------------------------- -- -- Dumping data for table `sys_user` -- INSERT INTO `sys_user` (`userid`, `sys_userid`, `sys_groupid`, `sys_perm_user`, `sys_perm_group`, `sys_perm_other`, `username`, `passwort`, `modules`, `startmodule`, `app_theme`, `typ`, `active`, `language`, `groups`, `default_group`, `client_id`) VALUES (1, 1, 0, 'riud', 'riud', '', 'admin', 'xxx', 'dashboard,admin,client,mail,monitor,sites,dns,vm,tools,help', 'dashboard', 'default', 'admin', 1, 'en', '1,2', 1, 0); -- -------------------------------------------------------- -- -- Dumping data for table `sys_config` -- INSERT INTO sys_config VALUES ('db','db_version','3.3.3p2'); INSERT INTO sys_config VALUES ('interface','session_timeout','0'); SET FOREIGN_KEY_CHECKS = 1; ispconfig3_install/install/sql/README.txt0000775000000000000000000000415315114346020017315 0ustar rootroot --------------------------------------------------------------------------------- - Developer README --------------------------------------------------------------------------------- When you add or modify a database field or table in the ISPConfig database, then follow these steps: 1) Add the field or table in the ispconfig3.sql file. This file contains the complete database dump which is used when ISPConfig gets installed. 2) Edit the file "incremental/upd_dev_collection.sql" which contains the SQL statements (alter table, add table, update, etc.) in MySQL syntax which are required to modify the current ispconfig database during update. The upd_dev_collection.sql file contains all db schema modifications for changes made since the last ISPConfig release. If SQL statements are already present in the file when you make your additions, add yours to the end of the file, and do not remove any existing statements. When a new ISPConfig update is released, the contents of upd_dev_collections.sql will move to an sql patch file, using the naming scheme upd_0001.sql, upd_0002.sql, upd_0003.sql etc. A patch file may contain one or more SQL modification statements. Every patch file gets executed once in the database, so do not modify older (already released) patch files, they will not get executed again if the update was already run once on a system, and will result in missing updates on any system where they have not run yet. After a patch has been executed, the dbversion field in the server table gets increeased to the version number of the last installed patch. If you like to run a patch file again for testing purposes on your dev machine, then set the number in "dbversion" field of the server table to be lower then the number of your patch. Note: Incremental patches are supported for installed ISPConfig versions > 3.0.3. If the installed version is < 3.0.3, then the full update method is used. In other words, ISPConfig 3.0.3 is the patch release (dbversion) 0 as the incremental update feature has been introduced in 3.0.3. ispconfig3_install/install/sql/powerdns.sql0000775000000000000000000000404615114346020020202 0ustar rootrootCREATE TABLE IF NOT EXISTS `domains` ( `id` int(11) NOT NULL auto_increment, `name` varchar(255) NOT NULL, `master` varchar(128) default NULL, `last_check` int(11) default NULL, `type` varchar(6) NOT NULL, `notified_serial` int(11) default NULL, `account` varchar(40) default NULL, `ispconfig_id` int(11) NOT NULL, PRIMARY KEY (`id`), UNIQUE KEY `name_index` (`name`) ) ENGINE=InnoDB; CREATE TABLE IF NOT EXISTS `records` ( `id` int(11) NOT NULL auto_increment, `domain_id` int(11) default NULL, `name` varchar(255) default NULL, `type` varchar(6) default NULL, `content` TEXT default NULL, `ttl` int(11) default NULL, `prio` int(11) default NULL, `change_date` int(11) default NULL, `disabled` tinyint(1) default 0, `auth` tinyint(1) default 1, `ispconfig_id` int(11) NOT NULL, PRIMARY KEY (`id`), KEY `rec_name_index` (`name`), KEY `nametype_index` (`name`,`type`), KEY `domain_id` (`domain_id`) ) ENGINE=InnoDB; CREATE TABLE IF NOT EXISTS `supermasters` ( `ip` varchar(25) NOT NULL, `nameserver` varchar(255) NOT NULL, `account` varchar(40) default NULL ) ENGINE=InnoDB; CREATE TABLE IF NOT EXISTS `domainmetadata` ( `id` int auto_increment, `domain_id` int NOT NULL, `kind` varchar(32), `content` TEXT, PRIMARY KEY (`id`) ) Engine=InnoDB; -- add new columns if not existing SET @dbname = DATABASE(); SELECT count(*) INTO @exist FROM `information_schema`.`columns` WHERE `table_schema` = @dbname AND `column_name` = 'auth' AND `table_name` = 'records' LIMIT 1; SET @query = IF(@exist <= 0, 'ALTER TABLE `records` ADD COLUMN `auth` tinyint(1) default 1 AFTER `change_date`', 'SELECT \'Column Exists\' STATUS'); PREPARE stmt FROM @query; EXECUTE stmt; SELECT count(*) INTO @exist FROM `information_schema`.`columns` WHERE `table_schema` = @dbname AND `column_name` = 'disabled' AND `table_name` = 'records' LIMIT 1; SET @query = IF(@exist <= 0, 'ALTER TABLE `records` ADD COLUMN `disabled` tinyint(1) default 0 AFTER `change_date`', 'SELECT \'Column Exists\' STATUS'); PREPARE stmt FROM @query; EXECUTE stmt; ispconfig3_install/install/update.php0000775000000000000000000011367115273367323017040 0ustar rootroot> Update \n\n"; //** Include the library with the basic installer functions require_once 'lib/install.lib.php'; //** Include the library with the basic updater functions require_once 'lib/update.lib.php'; //** Include the base class of the installer class require_once 'lib/installer_base.lib.php'; //** Allow only one update run at a time, the lock is released when this process ends $update_lock = @fopen('/run/lock/ispconfig-update.lock', 'ce'); if($update_lock && !flock($update_lock, LOCK_EX | LOCK_NB)) { die('Another ISPConfig update is running on this server (PID '.trim((string)@file_get_contents('/run/lock/ispconfig-update.lock')).').'."\n"); } if($update_lock) { ftruncate($update_lock, 0); fwrite($update_lock, getmypid()); fflush($update_lock); } //** Ensure that current working directory is install directory $cur_dir = getcwd(); if(realpath(dirname(__FILE__)) != $cur_dir) die("Please run installation/update from _inside_ the install directory!\n"); //** Install logfile define('ISPC_INSTALL_ROOT', realpath(dirname(__FILE__).'/../')); //** Include the templating lib require_once 'lib/classes/tpl.inc.php'; //** Check for ISPConfig 2.x versions if(is_dir('/root/ispconfig') || is_dir('/home/admispconfig')) { if(is_dir('/home/admispconfig')) { die('This software cannot be installed on a server which runs ISPConfig 2.x.'); } else { die('This software cannot be installed on a server which runs ISPConfig 2.x; the presence of the /root/ispconfig/ directory may indicate an ISPConfig 2.x installation, otherwise you can remove or rename it to continue.'); } } // Patch is required to reapir latest amavis versions if(is_installed('amavisd-new') && !is_installed('patch')) die('The patch command is missing. Install patch command and start update again.'); //** Get distribution identifier $dist = get_distname(); include_once "/usr/local/ispconfig/server/lib/config.inc.php"; $conf_old = $conf; unset($conf); define('ISPC_LOG_FILE', $conf_old['ispconfig_log_dir'] . '/update.log'); if($dist['id'] == '') die('Linux distribution or version not recognized.'); //** Include the autoinstaller configuration (for non-interactive setups) error_reporting(E_ALL ^ E_NOTICE); //** Get commandline options $cmd_opt = getopt('', array('autoinstall::')); //** Load autoinstall file if(isset($cmd_opt['autoinstall'])) { if (empty($cmd_opt['autoinstall'])) { // Meaning --autoinstall was passed without a value. // Set default $cmd_opt['autoinstall'] = "/usr/local/ispconfig/server/lib/autoinstall.conf.php"; } if (!is_file($cmd_opt['autoinstall']) || !in_array(pathinfo($cmd_opt['autoinstall'], PATHINFO_EXTENSION), array('php', 'ini'))) { echo "Autoinstall config file not found or not a .php or .ini file. (default is /usr/local/ispconfig/server/lib/autoinstall.conf.php)\n"; exit(1); } $path_parts = pathinfo($cmd_opt['autoinstall']); if($path_parts['extension'] == 'php') { include_once $cmd_opt['autoinstall']; } elseif($path_parts['extension'] == 'ini') { $tmp = ini_to_array(file_get_contents($cmd_opt['autoinstall'])); if(!is_array($tmp['install'])) $tmp['install'] = array(); if(!is_array($tmp['ssl_cert'])) $tmp['ssl_cert'] = array(); if(!is_array($tmp['expert'])) $tmp['expert'] = array(); if(!is_array($tmp['update'])) $tmp['update'] = array(); $autoinstall = $tmp['update'] + $tmp['install'] + $tmp['ssl_cert'] + $tmp['expert']; unset($tmp); } unset($path_parts); define('AUTOINSTALL', true); } else { $autoinstall = array(); define('AUTOINSTALL', false); } //** Include the distribution-specific installer class library and configuration if(is_file('dist/lib/'.$dist['baseid'].'.lib.php')) include_once 'dist/lib/'.$dist['baseid'].'.lib.php'; include_once 'dist/lib/'.$dist['id'].'.lib.php'; include_once 'dist/conf/'.$dist['confid'].'.conf.php'; //** Get hostname exec('hostname -f', $tmp_out); $conf['hostname'] = $tmp_out[0]; unset($tmp_out); //** Set the mysql login information $conf["mysql"]["host"] = $conf_old["db_host"]; $conf["mysql"]["database"] = $conf_old["db_database"]; $conf['mysql']['charset'] = 'utf8mb4'; $conf["mysql"]["ispconfig_user"] = $conf_old["db_user"]; $conf["mysql"]["ispconfig_password"] = $conf_old["db_password"]; $conf['mysql']['port'] = $conf_old["db_port"]; if($conf['mysql']['port'] == 0 || $conf['mysql']['port'] == '') $conf['mysql']['port'] = 3306; $conf['language'] = $conf_old['language']; $conf['theme'] = $conf_old['theme']; if($conf['language'] == '{language}') $conf['language'] = 'en'; $conf['timezone'] = (isset($conf_old['timezone']))?$conf_old['timezone']:'UTC'; if($conf['timezone'] == '{timezone}' or trim($conf['timezone']) == '') $conf['timezone'] = 'UTC'; $conf['language_file_import_enabled'] = (isset($conf_old['language_file_import_enabled']))?$conf_old['language_file_import_enabled']:true; if(isset($conf_old["dbmaster_host"])) $conf["mysql"]["master_host"] = $conf_old["dbmaster_host"]; if(isset($conf_old["dbmaster_port"])) $conf["mysql"]["master_port"] = $conf_old["dbmaster_port"]; if(isset($conf_old["dbmaster_database"])) $conf["mysql"]["master_database"] = $conf_old["dbmaster_database"]; if(isset($conf_old["dbmaster_user"])) $conf["mysql"]["master_ispconfig_user"] = $conf_old["dbmaster_user"]; if(isset($conf_old["dbmaster_password"])) $conf["mysql"]["master_ispconfig_password"] = $conf_old["dbmaster_password"]; if(isset($conf_old['dbmaster_client_flags'])) { $conf['mysql']['master_client_flags'] = intval($conf_old['dbmaster_client_flags']); } if(isset($conf_old['db_client_flags'])) { $conf['mysql']['client_flags'] = intval($conf_old['db_client_flags']); } //* Check if this is a master / slave setup if($conf["mysql"]["master_host"] != '' && $conf["mysql"]["host"] != $conf["mysql"]["master_host"]) { $conf['mysql']['master_slave_setup'] = 'y'; } // Resolve the IP address of the mysql hostname. if(!$conf['mysql']['ip'] = gethostbyname($conf['mysql']['host'])) die('Unable to resolve hostname'.$conf['mysql']['host']); $conf['server_id'] = intval($conf_old["server_id"]); $conf['ispconfig_log_priority'] = $conf_old["log_priority"]; $conf['db_log_message_max_length'] = (isset($conf_old['db_log_message_max_length'])) ? $conf_old['db_log_message_max_length'] : '32768'; $inst = new installer(); $inst->is_update = true; $inst->check_prerequisites(); echo "This application will update ISPConfig 3 on your server.\n\n"; //* Make a backup before we start the update $do_backup = $inst->simple_query('Shall the script create a ISPConfig backup in /var/backup/ now?', array('yes', 'no'), 'yes','do_backup'); if($do_backup == 'yes') { //* Create the backup directory $backup_path = '/var/backup/ispconfig_'.$conf['hostname'].'_'.@date('Y-m-d_H-i'); $conf['backup_path'] = $backup_path; exec("mkdir -p $backup_path"); exec("chown root:root $backup_path"); exec("chmod 700 $backup_path"); //* Do the backup swriteln('Creating backup of "/usr/local/ispconfig" directory...'); exec("tar pcfz $backup_path/ispconfig_software.tar.gz /usr/local/ispconfig 2> /dev/null", $out, $returnvar); if($returnvar != 0) die("Backup failed. We stop here...\n"); swriteln('Creating backup of "/etc" directory...'); exec("tar pcfz $backup_path/etc.tar.gz /etc 2> /dev/null", $out, $returnvar); if($returnvar != 0) die("Backup failed. We stop here...\n"); if (is_dir('/root/.acme.sh')) { swriteln('Creating backup of "/root/.acme.sh" directory...'); exec("tar pcfz $backup_path/acme.sh.tar.gz /root/.acme.sh 2> /dev/null", $out, $returnvar); if($returnvar != 0) die("Backup failed. We stop here...\n"); } exec("chown root:root $backup_path/*.tar.gz"); exec("chmod 700 $backup_path/*.tar.gz"); } //** Initialize the MySQL server connection include_once 'lib/mysql.lib.php'; //** Database update is a bit brute force and should be rebuild later ;) /* * Try to read the DB-admin settings */ $clientdb_host = ''; $clientdb_user = ''; $clientdb_password = ''; include_once "/usr/local/ispconfig/server/lib/mysql_clientdb.conf"; $conf["mysql"]["admin_user"] = $clientdb_user; $conf["mysql"]["admin_password"] = $clientdb_password; $clientdb_host = ''; $clientdb_user = ''; $clientdb_password = ''; // Report failed logins by return value instead of an exception (default since PHP 8.1), so the retry loops work mysqli_report(MYSQLI_REPORT_OFF); //** Test mysql root connection $finished = false; $password_queried = false; do { if(@mysqli_connect($conf["mysql"]["host"], $conf["mysql"]["admin_user"], $conf["mysql"]["admin_password"])) { $finished = true; } else { swriteln($inst->lng('Unable to connect to mysql server').' '.mysqli_connect_error()); if(AUTOINSTALL && $password_queried) { // in autoinstall mode the answers cannot change, so retrying would loop forever exit(1); } $conf["mysql"]["admin_password"] = $inst->free_query('MySQL root password', $conf['mysql']['admin_password'],'mysql_root_password'); $password_queried = true; } } while ($finished == false); unset($finished, $password_queried); /* * Prepare the dump of the database */ prepareDBDump(); //* initialize the database $inst->db = new db(); $inst->db->setDBData($conf['mysql']["host"], $conf['mysql']["ispconfig_user"], $conf['mysql']["ispconfig_password"], $conf['mysql']["port"]); $inst->db->setDBName($conf['mysql']['database']); //* Check MySQL version $inst->check_mysql_version(); //* initialize the master DB, if we have a multiserver setup if($conf['mysql']['master_slave_setup'] == 'y') { //** Get MySQL root credentials $finished = false; do { $tmp_mysql_server_host = $inst->free_query('MySQL master server hostname', $conf['mysql']['master_host'],'mysql_master_hostname'); $tmp_mysql_server_port = $inst->free_query('MySQL master server port', $conf['mysql']['master_port'],'mysql_master_port'); $tmp_mysql_server_admin_user = $inst->free_query('MySQL master server root username', $conf['mysql']['master_admin_user'],'mysql_master_root_user'); $tmp_mysql_server_admin_password = $inst->free_query('MySQL master server root password', $conf['mysql']['master_admin_password'],'mysql_master_root_password'); $tmp_mysql_server_database = $inst->free_query('MySQL master server database name', $conf['mysql']['master_database'],'mysql_master_database'); //* Initialize the MySQL server connection $tmp_link = mysqli_init(); if(@mysqli_real_connect($tmp_link, $tmp_mysql_server_host, $tmp_mysql_server_admin_user, $tmp_mysql_server_admin_password, $tmp_mysql_server_database, (int)$tmp_mysql_server_port, null, (isset($conf['mysql']['master_client_flags']) ? $conf['mysql']['master_client_flags'] : 0))) { mysqli_close($tmp_link); $conf['mysql']['master_host'] = $tmp_mysql_server_host; $conf['mysql']['master_port'] = $tmp_mysql_server_port; $conf['mysql']['master_admin_user'] = $tmp_mysql_server_admin_user; $conf['mysql']['master_admin_password'] = $tmp_mysql_server_admin_password; $conf['mysql']['master_database'] = $tmp_mysql_server_database; $finished = true; } else { swriteln($inst->lng('Unable to connect to mysql server').' '.mysqli_connect_error()); if(AUTOINSTALL) { // in autoinstall mode the answers cannot change, so retrying would loop forever exit(1); } } } while ($finished == false); unset($finished); // initialize the connection to the master database $inst->dbmaster = new db(); if($inst->dbmaster->linkId) $inst->dbmaster->closeConn(); $inst->dbmaster->setDBData($conf['mysql']["master_host"], $conf['mysql']["master_admin_user"], $conf['mysql']["master_admin_password"], $conf['mysql']["master_port"]); if(isset($conf['mysql']['master_client_flags'])) { $inst->dbmaster->setDBClientFlags($conf['mysql']['master_client_flags']); } $inst->dbmaster->setDBName($conf['mysql']["master_database"]); } else { $inst->dbmaster= new db(); $inst->dbmaster->setDBData($conf['mysql']["host"], $conf['mysql']["admin_user"], $conf['mysql']["admin_password"], $conf['mysql']["port"]); $inst->dbmaster->setDBName($conf['mysql']['database']); } /* * Check all tables */ checkDbHealth(); /* * Check command line mysql login */ $cmd = "mysql ".mysql_admin_option()." --default-character-set=".escapeshellarg($conf['mysql']['charset'])." --force -D ".escapeshellarg($conf['mysql']['database'])." -e ". escapeshellarg('SHOW DATABASES'); $retval = 0; $retout = array(); exec($cmd, $retout, $retval); if($retval != 0) { die("Unable to call mysql command line with credentials from mysql_clientdb.conf\n"); } /* * dump the new Database and reconfigure the server.ini */ updateDbAndIni(); //** read server config from db into $conf['server_config'] $tmp = $inst->db->queryOneRecord("SELECT config FROM ?? WHERE server_id = ?", $conf["mysql"]["database"] . '.server', $conf['server_id']); $conf['server_config'] = ini_to_array(stripslashes($tmp['config'])); unset($tmp); /* * Reconfigure the permisson if needed * (if this is done at client side, only this client is updated. * If this is done at server side, all clients are updated. */ //if($conf_old['dbmaster_user'] != '' or $conf_old['dbmaster_host'] != '') { //** Update master database rights $reconfigure_master_database_rights_answer = $inst->simple_query('Reconfigure Permissions in master database?', array('yes', 'no'), 'no','reconfigure_permissions_in_master_database'); if($reconfigure_master_database_rights_answer == 'yes') { $inst->grant_master_database_rights(); } //} //** Detect the installed applications $inst->find_installed_apps(); //* Only the configured web server counts as installed, also when the binary of the other one exists if($conf['webserver']['server_type'] == 'nginx') { $conf['apache']['installed'] = false; } else { $conf['nginx']['installed'] = false; } //** Check for current service config state and compare to our results if ($conf['mysql']['master_slave_setup'] == 'y') $current_svc_config = $inst->dbmaster->queryOneRecord("SELECT mail_server,web_server,dns_server,xmpp_server,firewall_server,vserver_server,db_server FROM ?? WHERE server_id=?", $conf['mysql']['master_database'] . '.server', $conf['server_id']); else $current_svc_config = $inst->db->queryOneRecord("SELECT mail_server,web_server,dns_server,xmpp_server,firewall_server,vserver_server,db_server FROM ?? WHERE server_id=?", $conf["mysql"]["database"] . '.server', $conf['server_id']); if(isset($conf['postfix']['installed']) && $conf['postfix']['installed'] == true) { $conf['services']['mail'] = check_service_config_state('mail_server', true); } else { $conf['services']['mail'] = check_service_config_state('mail_server', false); } if(isset($conf['powerdns']['installed']) && $conf['powerdns']['installed'] == true || isset($conf['bind']['installed']) && $conf['bind']['installed'] == true || isset($conf['mydns']['installed']) && $conf['mydns']['installed'] == true) { $conf['services']['dns'] = check_service_config_state('dns_server', true); } else { $conf['services']['dns'] = check_service_config_state('dns_server', false); } if(isset($conf['apache']['installed']) && $conf['apache']['installed'] == true || isset($conf['nginx']['installed']) && $conf['nginx']['installed'] == true) { $conf['services']['web'] = check_service_config_state('web_server', true); } else { $conf['services']['web'] = check_service_config_state('web_server', false); } if(isset($conf['xmpp']['installed']) && $conf['xmpp']['installed'] == true) { $conf['services']['xmpp'] = check_service_config_state('xmpp_server', true); } else { $conf['services']['xmpp'] = check_service_config_state('xmpp_server', false); } if(isset($conf['ufw']['installed']) && $conf['ufw']['installed'] == true || isset($conf['firewall']['installed']) && $conf['firewall']['installed'] == true) { $conf['services']['firewall'] = check_service_config_state('firewall_server', true); } else { $conf['services']['firewall'] = check_service_config_state('firewall_server', false); } if(isset($conf['vserver']['installed']) && $conf['vserver']['installed'] == true) { $conf['services']['vserver'] = check_service_config_state('vserver_server', true); } else { $conf['services']['vserver'] = check_service_config_state('vserver_server', false); } $conf['services']['db'] = check_service_config_state('db_server', true); /* Will always offer as MySQL is of course installed on this host as it's a requirement for ISPC to work... */ unset($current_svc_config); //** Write new decisions into DB $service_flags = array(); foreach(array('mail', 'web', 'dns', 'file', 'db', 'vserver', 'proxy', 'firewall', 'xmpp') as $service) { $service_flags[] = $service.'_server = '.(int)$conf['services'][$service]; } $sql = "UPDATE ?? SET ".implode(', ', $service_flags)." WHERE server_id = ?"; if(!$inst->db->query($sql, $conf['mysql']['database'].'.server', $conf['server_id'])) { swriteln('WARNING: The service settings of this server could not be saved in the local database.'); } if($conf['mysql']['master_slave_setup'] == 'y') { if(!$inst->dbmaster->query($sql, $conf['mysql']['master_database'].'.server', $conf['server_id'])) { swriteln('WARNING: The service settings of this server could not be saved in the master database.'); } } //** Is the ISPConfg Panel installed on this host? This might partially override user's preferences later. if($conf['apache']['installed'] == true){ if(!is_file($conf['apache']['vhost_conf_dir'].'/ispconfig.vhost')) $inst->install_ispconfig_interface = false; } elseif($conf['nginx']['installed'] == true){ if(!is_file($conf['nginx']['vhost_conf_dir'].'/ispconfig.vhost')) $inst->install_ispconfig_interface = false; } else { // If neither webserver is installed then this can't be the server that hosts the ispconfig interface. $inst->install_ispconfig_interface = false; } //* Remote users are not replicated to a slave without the interface if($conf['mysql']['master_slave_setup'] == 'y' && $conf['server_id'] != 1 && !$inst->install_ispconfig_interface) { $inst->db->query('DELETE FROM ??', $conf['mysql']['database'].'.remote_user'); } //* Check and install rsync (required for secure backup restoration) swriteln('Checking for rsync...'); $inst->check_and_install_rsync(); //** Shall the services be reconfigured during update $reconfigure_services_answer = $inst->simple_query('Reconfigure Services?', array('yes', 'no', 'selected'), 'yes','reconfigure_services'); if($reconfigure_services_answer == 'yes' || $reconfigure_services_answer == 'selected') { checkAndRenameCustomTemplates(); if($conf['services']['mail']) { //** Configure postfix if($inst->reconfigure_app('Postfix and IMAP/POP3', $reconfigure_services_answer)) { swriteln('Configuring Postfix'); $inst->configure_postfix('dont-create-certs'); if($conf['dovecot']['installed'] == true) { //* Configure dovecot swriteln('Configuring Dovecot'); $inst->configure_dovecot(); } elseif ($conf['courier']['installed'] == true) { //** Configure saslauthd swriteln('Configuring SASL'); $inst->configure_saslauthd(); //** Configure PAM swriteln('Configuring PAM'); $inst->configure_pam(); //* Configure courier swriteln('Configuring Courier'); $inst->configure_courier(); } } //** Configure mailman if($conf['mailman']['installed'] == true && $inst->reconfigure_app('Mailman', $reconfigure_services_answer)) { swriteln('Configuring Mailman'); $inst->configure_mailman('update'); } //** Configure Spamasassin if($inst->reconfigure_app('Spamassassin', $reconfigure_services_answer)) { swriteln('Configuring Spamassassin'); $inst->configure_spamassassin(); } //** Configure Amavis if($conf['amavis']['installed'] == true && $inst->reconfigure_app('Amavisd', $reconfigure_services_answer)) { swriteln('Configuring Amavisd'); $inst->configure_amavis(); } //** Configure Rspamd if($conf['rspamd']['installed'] == true && $inst->reconfigure_app('Rspamd', $reconfigure_services_answer)) { swriteln('Configuring Rspamd'); $inst->configure_rspamd(); } //** Configure Getmail if ($inst->reconfigure_app('Getmail', $reconfigure_services_answer)) { swriteln('Configuring Getmail'); $inst->configure_getmail(); } } if($conf['services']['dns'] && $inst->reconfigure_app('DNS', $reconfigure_services_answer)) { //* Configure DNS if($conf['powerdns']['installed'] == true) { swriteln('Configuring PowerDNS'); $inst->configure_powerdns(); } elseif($conf['bind']['installed'] == true) { swriteln('Configuring BIND'); $inst->configure_bind(); if(!is_installed('haveged')) { swriteln("[INFO] haveged not detected - DNSSEC can fail"); } } else { swriteln('Configuring MyDNS'); $inst->configure_mydns(); } } if($conf['services']['web'] || $inst->install_ispconfig_interface) { if($conf['pureftpd']['installed'] == true && $inst->reconfigure_app('Pureftpd', $reconfigure_services_answer)) { //** Configure Pureftpd swriteln('Configuring Pureftpd'); $inst->configure_pureftpd(); } if($inst->reconfigure_app('Web-Server', $reconfigure_services_answer)) { if($conf['webserver']['server_type'] == 'apache'){ //** Configure Apache swriteln('Configuring Apache'); $inst->configure_apache(); //** Configure vlogger swriteln('Configuring vlogger'); $inst->configure_vlogger(); } else { //** Configure nginx swriteln('Configuring nginx'); $inst->configure_nginx(); } if ($conf['server_config']['web']['apps_vhost_enabled'] == 'y') { //** Configure apps vhost swriteln('Configuring Apps vhost'); $inst->configure_apps_vhost(); } else swriteln('Skipping config of Apps vhost'); } //* Configure Jailkit if($inst->reconfigure_app('Jailkit', $reconfigure_services_answer)) { swriteln('Configuring Jailkit'); $inst->configure_jailkit(); } } if($conf['services']['xmpp'] && $inst->reconfigure_app('XMPP', $reconfigure_services_answer)) { //** Configure Metronome XMPP $inst->configure_xmpp('dont-create-certs'); } // Configure AppArmor if($conf['apparmor']['installed']){ swriteln('Configuring AppArmor'); $inst->configure_apparmor(); } if($conf['services']['firewall'] && $inst->reconfigure_app('Firewall', $reconfigure_services_answer)) { if(isset($conf['ufw']['installed']) && $conf['ufw']['installed'] == true) { //* Configure Ubuntu Firewall $conf['services']['firewall'] = true; swriteln('Configuring Ubuntu Firewall'); $inst->configure_ufw_firewall(); } else { //* Configure Bastille Firewall swriteln('Configuring Bastille Firewall'); $inst->configure_bastille_firewall(); } } //* Configure DBServer swriteln('Configuring Database'); $inst->configure_dbserver(); /* if($conf['squid']['installed'] == true) { swriteln('Configuring Squid'); $inst->configure_squid(); } else if($conf['nginx']['installed'] == true) { swriteln('Configuring Nginx'); $inst->configure_nginx(); } */ } //** Configure ISPConfig swriteln('Updating ISPConfig'); $issue_asked = false; $issue_tried = false; // create acme vhost if($conf['nginx']['installed'] == true) { $inst->make_acme_vhost('nginx'); // we need this config file but we don't want nginx to be restarted at this point } if($conf['apache']['installed'] == true) { $inst->make_acme_vhost('apache'); // we need this config file but we don't want apache to be restarted at this point } if ($inst->install_ispconfig_interface) { //** Customise the port ISPConfig runs on $ispconfig_port_number = get_ispconfig_port_number(); if(isset($autoupdate['ispconfig_port']) && $autoupdate['ispconfig_port'] == 'default') $autoupdate['ispconfig_port'] = $ispconfig_port_number; if($conf['webserver']['server_type'] == 'nginx'){ $conf['nginx']['vhost_port'] = $inst->free_query('ISPConfig Port', $ispconfig_port_number,'ispconfig_port'); } else { $conf['apache']['vhost_port'] = $inst->free_query('ISPConfig Port', $ispconfig_port_number,'ispconfig_port'); } // $ispconfig_ssl_default = (is_ispconfig_ssl_enabled() == true)?'y':'n'; if(strtolower($inst->simple_query('Create new ISPConfig SSL certificate', array('yes', 'no'), 'no','create_new_ispconfig_ssl_cert')) == 'yes') { $inst->make_ispconfig_ssl_cert(); $issue_tried = true; } $issue_asked = true; } // Create SSL certs for non-webserver(s)? if(!$issue_asked) { if(!file_exists('/usr/local/ispconfig/interface/ssl/ispserver.crt')) { if(!$issue_tried && strtolower($inst->simple_query('Do you want to create SSL certs for your server?', array('y', 'n'), 'y','create_ssl_server_certs')) == 'y') { $inst->make_ispconfig_ssl_cert(); } } else { swriteln('Certificate exists. Not creating a new one.'); } } // update acme.sh if installed $inst->update_acme(); $inst->install_ispconfig(); $inst->disable_unused_remote_api(); if($conf['services']['db']) { $inst->migrate_db_grant_names(); $inst->migrate_pg_database_access(); } // Cleanup $inst->cleanup_ispconfig(); //** Configure Crontab $update_crontab_answer = $inst->simple_query('Reconfigure Crontab?', array('yes', 'no'), 'yes','reconfigure_crontab'); if($update_crontab_answer == 'yes') { swriteln('Updating Crontab'); $inst->install_crontab(); } //** Restart services: if($reconfigure_services_answer == 'yes') { swriteln('Restarting services ...'); if($conf['mysql']['installed'] == true && isset($conf['mysql']['init_script']) && $conf['mysql']['init_script'] != '') system($inst->getinitcommand($conf['mysql']['init_script'], 'restart').' >/dev/null 2>&1'); if($conf['services']['mail']) { if($conf['postfix']['installed'] == true && isset($conf['postfix']['init_script']) && $conf['postfix']['init_script'] != '') system($inst->getinitcommand($conf['postfix']['init_script'], 'restart')); if($conf['saslauthd']['installed'] == true && isset($conf['saslauthd']['init_script']) && $conf['saslauthd']['init_script'] != '') system($inst->getinitcommand($conf['saslauthd']['init_script'], 'restart')); if($conf['amavis']['installed'] == true && isset($conf['amavis']['init_script']) && $conf['amavis']['init_script'] != '') system($inst->getinitcommand($conf['amavis']['init_script'], 'restart')); if($conf['rspamd']['installed'] == true && isset($conf['rspamd']['init_script']) && $conf['rspamd']['init_script'] != '') system($inst->getinitcommand($conf['rspamd']['init_script'], 'restart')); if($conf['clamav']['installed'] == true && isset($conf['clamav']['init_script']) && $conf['clamav']['init_script'] != '' && $conf['amavis']['installed'] == true) system($inst->getinitcommand($conf['clamav']['init_script'], 'restart')); if($conf['courier']['installed'] == true){ if($conf['courier']['courier-authdaemon'] != '') system($inst->getinitcommand($conf['courier']['courier-authdaemon'], 'restart')); if($conf['courier']['courier-imap'] != '') system($inst->getinitcommand($conf['courier']['courier-imap'], 'restart')); if($conf['courier']['courier-imap-ssl'] != '') system($inst->getinitcommand($conf['courier']['courier-imap-ssl'], 'restart')); if($conf['courier']['courier-pop'] != '') system($inst->getinitcommand($conf['courier']['courier-pop'], 'restart')); if($conf['courier']['courier-pop-ssl'] != '') system($inst->getinitcommand($conf['courier']['courier-pop-ssl'], 'restart')); } if($conf['dovecot']['installed'] == true && isset($conf['dovecot']['init_script']) && $conf['dovecot']['init_script'] != '') system($inst->getinitcommand($conf['dovecot']['init_script'], 'restart')); if($conf['mailman']['installed'] == true && isset($conf['mailman']['init_script']) && $conf['mailman']['init_script'] != '') system('nohup '.$inst->getinitcommand($conf['mailman']['init_script'], 'restart').' >/dev/null 2>&1 &'); } if($conf['services']['web'] || $inst->install_ispconfig_interface) { if($conf['webserver']['server_type'] == 'apache') { // If user has configured a custom Apache init script, use that. Otherwise use the default auto-detected init script if(!empty($conf['server_config']['web']['apache_init_script'])) { system($inst->getinitcommand($conf['server_config']['web']['apache_init_script'], 'restart')); } elseif(!empty($conf['apache']['init_script'])) { system($inst->getinitcommand($conf['apache']['init_script'], 'restart')); } } //* Reload is enough for nginx if($conf['webserver']['server_type'] == 'nginx'){ if($conf['nginx']['php_fpm_init_script'] != '') system($inst->getinitcommand($conf['nginx']['php_fpm_init_script'], 'reload')); if(isset($conf['nginx']['init_script']) && $conf['nginx']['init_script'] != '') system($inst->getinitcommand($conf['nginx']['init_script'], 'reload')); } if($conf['pureftpd']['installed'] == true && isset($conf['pureftpd']['init_script']) && $conf['pureftpd']['init_script'] != '') system($inst->getinitcommand($conf['pureftpd']['init_script'], 'restart')); } if($conf['services']['dns']) { if($conf['mydns']['installed'] == true && isset($conf['mydns']['init_script']) && $conf['mydns']['init_script'] != '') system($inst->getinitcommand($conf['mydns']['init_script'], 'restart').' > /dev/null 2>&1'); if($conf['powerdns']['installed'] == true && isset($conf['powerdns']['init_script']) && $conf['powerdns']['init_script'] != '') system($inst->getinitcommand($conf['powerdns']['init_script'], 'restart').' > /dev/null 2>&1'); if($conf['bind']['installed'] == true && isset($conf['bind']['init_script']) && $conf['bind']['init_script'] != '') system($inst->getinitcommand($conf['bind']['init_script'], 'restart').' > /dev/null 2>&1'); } if($conf['services']['xmpp']) { if($conf['xmpp']['installed'] == true && isset($conf['xmpp']['init_script']) && $conf['xmpp']['init_script'] != '') system($inst->getinitcommand($conf['xmpp']['init_script'], 'restart').' > /dev/null 2>&1'); } if($conf['services']['proxy']) { // if($conf['squid']['installed'] == true && isset($conf['squid']['init_script']) && $conf['squid']['init_script'] != '' && is_executable($conf['init_scripts'].'/'.$conf['squid']['init_script'])) system($conf['init_scripts'].'/'.$conf['squid']['init_script'].' restart > /dev/null 2>&1'); if($conf['nginx']['installed'] == true && isset($conf['nginx']['init_script']) && $conf['nginx']['init_script'] != '') system($inst->getinitcommand($conf['nginx']['init_script'], 'restart').' > /dev/null 2>&1'); } if($conf['services']['firewall']) { if(isset($conf['ufw']['installed']) && $conf['ufw']['installed'] == true && isset($conf['ufw']['init_script']) && $conf['ufw']['init_script'] != '' && is_executable($conf['init_scripts'].'/'.$conf['ufw']['init_script'])) system($conf['init_scripts'].'/'.$conf['ufw']['init_script'].' restart > /dev/null 2>&1'); } } //* Set default servers setDefaultServers(); $inst->create_mount_script(); //* Create md5 filelist $md5_filename = '/usr/local/ispconfig/security/data/file_checksums_'.date('Y-m-d_H-i').'.md5'; exec('find /usr/local/ispconfig -type f -print0 | xargs -0 md5sum > '.$md5_filename . ' 2>/dev/null'); chmod($md5_filename,0600); // TODO: In a future update, stop the update script when running courier if ($conf['courier']['installed'] == true) { swriteln('WARNING: You are running Courier. We are removing support for Courier from ISPConfig. Migrate your system to Dovecot as soon as possible. See https://www.howtoforge.com/community/threads/migrate-from-courier-to-dovecot-on-your-ispconfig-managed-mailserver.88523/ for more information.'); } //* Panel and remote users with a password hash that is not encrypted with crypt can not log in if($conf['mysql']['master_slave_setup'] != 'y') { $tmp = $inst->db->queryAllRecords("SELECT username AS name FROM sys_user WHERE passwort NOT LIKE '\$%' AND passwort != '' UNION SELECT remote_username AS name FROM remote_user WHERE remote_password NOT LIKE '\$%' AND remote_password != ''"); if(is_array($tmp) && !empty($tmp)) { swriteln('WARNING: These panel or remote users have an old password hash and can not log in until they get a new password (panel users: ispc user set-password ): '.implode(', ', array_column($tmp, 'name'))); } unset($tmp); } //* Subdomains, alias domains, shell and FTP users of websites that no longer exist if($conf['mysql']['master_slave_setup'] != 'y') { $tmp = $inst->db->queryAllRecords("SELECT CONCAT('domain ', c.domain) AS name FROM web_domain c LEFT JOIN web_domain p ON p.domain_id = c.parent_domain_id WHERE c.type != 'vhost' AND p.domain_id IS NULL UNION SELECT CONCAT('shell user ', s.username) FROM shell_user s LEFT JOIN web_domain p ON p.domain_id = s.parent_domain_id WHERE p.domain_id IS NULL UNION SELECT CONCAT('FTP user ', f.username) FROM ftp_user f LEFT JOIN web_domain p ON p.domain_id = f.parent_domain_id WHERE p.domain_id IS NULL"); if(is_array($tmp) && !empty($tmp)) { swriteln('WARNING: These records belong to a website that no longer exists, delete them in the panel under Sites: '.implode(', ', array_column($tmp, 'name'))); } unset($tmp); } //* Websites whose PHP-FPM pool listens on a TCP port instead of a socket if($conf['mysql']['master_slave_setup'] != 'y') { $tmp = $inst->db->queryAllRecords("SELECT CONCAT(d.domain, ' (', IFNULL(s.server_name, d.server_id), ')') AS domain FROM web_domain d LEFT JOIN server s ON s.server_id = d.server_id WHERE d.type IN ('vhost', 'vhostsubdomain', 'vhostalias') AND d.php IN ('php-fpm', 'hhvm') AND d.php_fpm_use_socket = 'n'"); if(is_array($tmp) && !empty($tmp)) { swriteln('WARNING: These websites run PHP-FPM on a TCP port that other system users on this server can connect to, enable "Use Socket For PHP-FPM" on their Options tab: '.implode(', ', array_column($tmp, 'domain'))); } unset($tmp); } //* Inactive shell users of this server get an expired account, so no login works (the server does this on every change since 3.3.3) $tmp = $inst->dbmaster->queryAllRecords("SELECT username FROM shell_user WHERE server_id = ? AND active != 'y'", $conf['server_id']); if(is_array($tmp)) { foreach($tmp as $rec) exec('usermod -e 1 -- ' . escapeshellarg($rec['username']) . ' 2>/dev/null'); } unset($tmp); //* The relay host password map and its indexed copies are readable by root only if(isset($conf['postfix']['installed']) && $conf['postfix']['installed'] == true && !empty($conf['postfix']['config_dir'])) { foreach(glob($conf['postfix']['config_dir'].'/sasl_passwd*') as $tmp) if(!is_link($tmp)) chmod($tmp, 0600); unset($tmp); } //* Protected folders of this server that belong to root are given to the website user (since 3.3.3 the server writes their files as the website user) $tmp = $inst->dbmaster->queryAllRecords("SELECT f.path, d.document_root, d.type, d.web_folder, d.system_user, d.system_group FROM web_folder f JOIN web_domain d ON d.domain_id = f.parent_domain_id WHERE f.server_id = ?", $conf['server_id']); if(is_array($tmp)) { $cwd = getcwd(); foreach($tmp as $rec) { $web_folder = ($rec['type'] == 'vhostsubdomain' || $rec['type'] == 'vhostalias') ? $rec['web_folder'] : 'web'; $folder_path = rtrim($rec['document_root'].'/'.$web_folder.'/'.trim($rec['path'], '/'), '/'); //* only a folder whose real path is this path if($rec['system_user'] == '' || !@chdir($folder_path) || getcwd() !== $folder_path) continue; if(fileowner('.') === 0) { chown('.', $rec['system_user']); chgrp('.', $rec['system_group']); } } chdir($cwd); } unset($tmp); $inst->vlogger_perl_module_warning(); //* nginx servers were installed without the file service before if($conf['webserver']['server_type'] == 'nginx' && $conf['pureftpd']['installed'] == true && !$conf['services']['file']) { $inst->warning('Pure-FTPd is installed, but the file service of this server is off. Enable it under System > Server Services if this server shall provide FTP.'); } echo "Update finished.\n"; ?> ispconfig3_install/install/setrights.php0000775000000000000000000001222715152616670017563 0ustar rootroot>This script tries to repair the client rights \n\n"; //** Include the library with the basic installer functions require_once 'lib/install.lib.php'; //** Include the library with the basic updater functions require_once 'lib/update.lib.php'; //** Include the base class of the installer class require_once 'lib/installer_base.lib.php'; //** Ensure that current working directory is install directory $cur_dir = getcwd(); if(realpath(dirname(__FILE__)) != $cur_dir) die("Please run installation/update from _inside_ the install directory!\n"); //** Get distribution identifier $dist = get_distname(); include_once "/usr/local/ispconfig/server/lib/config.inc.php"; $conf_old = $conf; unset($conf); if($dist['id'] == '') die('Linux distribution or version not recognized.'); //** Include the distribution-specific installer class library and configuration if(is_file('dist/lib/'.$dist['baseid'].'.lib.php')) include_once 'dist/lib/'.$dist['baseid'].'.lib.php'; include_once 'dist/lib/'.$dist['id'].'.lib.php'; include_once 'dist/conf/'.$dist['id'].'.conf.php'; //** Get hostname exec('hostname -f', $tmp_out); $conf['hostname'] = $tmp_out[0]; unset($tmp_out); //* Check if this is a master / slave setup $conf['mysql']['master_slave_setup'] = 'n'; if($conf["mysql"]["master_host"] != '' && $conf["mysql"]["host"] != $conf["mysql"]["master_host"]) { $conf['mysql']['master_slave_setup'] = 'y'; } /* * Try to read the DB-admin settings */ $clientdb_host = ''; $clientdb_user = ''; $clientdb_password = ''; include_once "/usr/local/ispconfig/server/lib/mysql_clientdb.conf"; $conf["mysql"]["admin_user"] = $clientdb_user; $conf["mysql"]["admin_password"] = $clientdb_password; $clientdb_host = ''; $clientdb_user = ''; $clientdb_password = ''; //** There is a error if user for mysql admin_password if empty if( empty($conf["mysql"]["admin_password"]) ) { die("internal error - MYSQL-Root passord not known"); } $inst = new installer(); //** Initialize the MySQL server connection include_once 'lib/mysql.lib.php'; //* initialize the database $inst->db = new db(); /* * The next line is a bit tricky! * At the automated update we have no connection to the master-db (we don't need it, because * there are only TWO points, where this is needed) * 1) update the rights --> the autoupdater sets the rights of all clients when the server is * autoupdated) * 2) update the server-settings (is web installed, is mail installed) --> the autoupdates * doesn't change any of this settings, so there ist no need to update this. * This means, the autoupdater did not need any connection to the master-db (only to the local bd * of the master-server). To avoid any problems, we set the master-db to the local one. */ $inst->dbmaster = $inst->db; /* * If it is NOT a master-slave - Setup then we are at the Master-DB. So set all rights */ if($conf['mysql']['master_slave_setup'] != 'y') { $inst->grant_master_database_rights(true); } echo "finished.\n"; ?> ispconfig3_install/install/dist/0000775000000000000000000000000015114346020015755 5ustar rootrootispconfig3_install/install/dist/conf/0000775000000000000000000000000015273367323016721 5ustar rootrootispconfig3_install/install/dist/conf/gentoo.conf.php0000775000000000000000000002545315152616670021663 0ustar rootroot ispconfig3_install/install/dist/conf/fedora9.conf.php0000775000000000000000000002266215152616670021720 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu2204.conf.php0000775000000000000000000002404415152616670022215 0ustar rootrootispconfig3_install/install/dist/conf/debian120.conf.php0000775000000000000000000002424515152616670022033 0ustar rootroot ispconfig3_install/install/dist/conf/debian40.conf.php0000775000000000000000000002357615152616670021762 0ustar rootroot ispconfig3_install/install/dist/conf/centos72.conf.php0000775000000000000000000002304015152616670022022 0ustar rootroot ispconfig3_install/install/dist/conf/debian60.conf.php0000775000000000000000000002374115152616670021756 0ustar rootroot ispconfig3_install/install/dist/conf/centos90.conf.php0000775000000000000000000002304415152616670022026 0ustar rootroot ispconfig3_install/install/dist/conf/debian130.conf.php0000775000000000000000000002424515152616670022034 0ustar rootroot ispconfig3_install/install/dist/conf/opensuse110.conf.php0000775000000000000000000002300315152616670022440 0ustar rootroot ispconfig3_install/install/dist/conf/debian110.conf.php0000775000000000000000000002424515152616670022032 0ustar rootroot ispconfig3_install/install/dist/conf/centos80.conf.php0000775000000000000000000002304415152616670022025 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu1804.conf.php0000775000000000000000000002404515152616670022223 0ustar rootroot ispconfig3_install/install/dist/conf/debiantesting.conf.php0000775000000000000000000002425215273367323023206 0ustar rootroot ispconfig3_install/install/dist/conf/centos53.conf.php0000775000000000000000000002266115152616670022031 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu2004.conf.php0000775000000000000000000002404515152616670022214 0ustar rootroot ispconfig3_install/install/dist/conf/debian100.conf.php0000775000000000000000000002424515152616670022031 0ustar rootroot ispconfig3_install/install/dist/conf/enterpriselinux10.conf.php0000775000000000000000000002305315152616670023763 0ustar rootroot ispconfig3_install/install/dist/conf/fedora32.conf.php0000775000000000000000000002306615152616670021773 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu1710.conf.php0000775000000000000000000002400715152616670022215 0ustar rootroot ispconfig3_install/install/dist/conf/fedora33.conf.php0000775000000000000000000002306615152616670021774 0ustar rootroot ispconfig3_install/install/dist/conf/opensuse112.conf.php0000775000000000000000000002277315152616670022457 0ustar rootroot ispconfig3_install/install/dist/conf/centos70.conf.php0000775000000000000000000002265615152616670022034 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu1604.conf.php0000775000000000000000000002404515152616670022221 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu2404.conf.php0000775000000000000000000002404415152616670022217 0ustar rootrootispconfig3_install/install/dist/conf/centos52.conf.php0000775000000000000000000002266115152616670022030 0ustar rootroot ispconfig3_install/install/dist/conf/debian90.conf.php0000775000000000000000000002424615152616670021762 0ustar rootroot ispconfig3_install/install/dist/conf/ubuntu2604.conf.php0000775000000000000000000002404515267416152022222 0ustar rootroot ispconfig3_install/install/dist/tpl/0000775000000000000000000000000015114346020016554 5ustar rootrootispconfig3_install/install/dist/tpl/gentoo/0000775000000000000000000000000015273367323020066 5ustar rootrootispconfig3_install/install/dist/tpl/gentoo/apache_ispconfig.vhost.master0000775000000000000000000001263515273367323025741 0ustar rootroot ###################################################### # This virtual host contains the configuration # for the ISPConfig controlpanel ###################################################### Listen NameVirtualHost *: > ServerAdmin webmaster@localhost Alias /mail /var/www/ispconfig/mail SetHandler None SetHandler None DocumentRoot /var/www/ispconfig/ SuexecUserGroup ispconfig ispconfig Options -Indexes +FollowSymLinks +MultiViews +ExecCGI AllowOverride AuthConfig Indexes Limit Options FileInfo SetHandler fcgid-script FCGIWrapper /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter .php Require all granted Order allow,deny Allow from all DirectoryIndex index.php IPCCommTimeout 7200 MaxRequestLen 15728640 DocumentRoot /usr/local/ispconfig/interface/web SuexecUserGroup ispconfig ispconfig DirectoryIndex index.php Options -Indexes +FollowSymLinks +MultiViews +ExecCGI AllowOverride AuthConfig Indexes Limit Options FileInfo Require all granted Order allow,deny Allow from all #SetHandler "proxy:unix:/var/lib/php5-fpm/ispconfig.sock|fcgi://localhost" SetHandler "proxy:fcgi://127.0.0.1:9000" DocumentRoot /usr/local/ispconfig/interface/web/ AssignUserId ispconfig ispconfig AddType application/x-httpd-php .php # php_admin_value open_basedir "/usr/local/ispconfig/interface:/usr/share:/tmp" Options +FollowSymLinks AllowOverride None Require all granted Order allow,deny Allow from all php_value magic_quotes_gpc 0 # ErrorLog /var/log/apache2/error.log # CustomLog /var/log/apache2/access.log combined ServerSignature Off LimitRequestBody 20971520 SecRuleEngine Off # SSL Configuration SSLEngine On SSLProtocol All -SSLv3 -TLSv1 -TLSv1.1 SSLProtocol All -SSLv2 -SSLv3 SSLCertificateFile /usr/local/ispconfig/interface/ssl/ispserver.crt SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/ispserver.key SSLCACertificateFile /usr/local/ispconfig/interface/ssl/ispserver.bundle SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 SSLHonorCipherOrder On SSLCompression Off SSLSessionTickets Off # ISPConfig 3.1 currently requires unsafe-line for both scripts and styles, as well as unsafe-eval Header always set Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; object-src 'none'; frame-ancestors 'self'" Header always set Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests" Header always set X-Content-Type-Options: nosniff Header always set X-Frame-Options: SAMEORIGIN Header always set Referrer-Policy: same-origin Header set X-XSS-Protection: "1; mode=block" Header always edit Set-Cookie (.*) "$1; HTTPOnly" Header always edit Set-Cookie (.*) "$1; Secure" = 2.4.7> Header setifempty Strict-Transport-Security "max-age=15768000" Header set Strict-Transport-Security "max-age=15768000" RequestHeader unset Proxy early # Redirect http to https ErrorDocument 400 "

Error 400 - trying to redirect

" ispconfig3_install/install/dist/tpl/gentoo/dovecot2.conf.master0000775000000000000000000000561615273367323023767 0ustar rootroot# Do not change this file, as changes will be overwritten by any ISPConfig update. # Put your custom settings in /usr/local/ispconfig/server/conf-custom/install/dovecot_custom.conf.master. # To start using those changes, do a force upgrade and let it reconfigure your services. (ispconfig_update.sh --force) listen = *,[::] protocols = imap pop3 auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_privileged_group = vmail postmaster_address = postmaster@example.com ssl_cert = 1, smtpd_discard_ehlo_keywords => ['8BITMIME'], }; # IP-Addresses for internal networks => load policy MYNETS # - requires -o smtp_send_xforward_command=yes in postfix master.cf @mynetworks = qw(0.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 [::1] [FE80::]/10 [FEC0::]/10); # Allow SMTP access from IPs in @inet_acl to amvisd SMTP Port @inet_acl = qw( 127.0.0.1 [::1] 192.168.0.0/16 ); # DKIM $enable_dkim_verification = 1; $enable_dkim_signing = 1; # load DKIM signing code $signed_header_fields{'received'} = 0; # turn off signing of Received @dkim_signature_options_bysender_maps = ( { '.' => { ttl => 21*24*3600, c => 'relaxed/simple' } } ); #------------ Do not modify anything below this line ------------- 1; # insure a defined return ispconfig3_install/install/dist/tpl/gentoo/apache_apps.vhost.master0000775000000000000000000000230715114346020024677 0ustar rootroot ###################################################### # This virtual host contains the configuration # for the ISPConfig apps vhost ###################################################### {vhost_port_listen} Listen {apps_vhost_port} # NameVirtualHost *:{apps_vhost_port} ServerAdmin webmaster@localhost {apps_vhost_servername} DocumentRoot {apps_vhost_dir} SuexecUserGroup ispapps ispapps Options +Indexes +FollowSymLinks +MultiViews +ExecCGI AllowOverride AuthConfig Indexes Limit Options FileInfo SetHandler fcgid-script FCGIWrapper {website_basedir}/php-fcgi-scripts/apps/.php-fcgi-starter .php Order allow,deny Allow from all DirectoryIndex index.php DocumentRoot {apps_vhost_dir} AddType application/x-httpd-php .php Options +FollowSymLinks AllowOverride None Order allow,deny Allow from all ServerSignature Off ispconfig3_install/install/dist/tpl/gentoo/apache_ispconfig.conf.master0000775000000000000000000000132315114346020025474 0ustar rootroot ################################################ # ISPConfig Logfile configuration for vlogger ################################################ LogFormat "%v %h %l %u %t \"%r\" %>s %B \"%{Referer}i\" \"%{User-Agent}i\"" combined_ispconfig CustomLog "| /usr/local/ispconfig/server/scripts/vlogger -s access.log -t \"%Y%m%d-access.log\" -d \"/etc/vlogger/vlogger-dbi.conf\" /var/log/ispconfig/httpd" combined_ispconfig AllowOverride None Order Deny,Allow Deny from all # allow path to awstats and alias for awstats icons Order allow,deny Allow from all Alias /awstats/icon "/usr/share/awstats/htdocs/icon" ispconfig3_install/install/dist/tpl/gentoo/jk_init.ini.master0000775000000000000000000001165415114346020023503 0ustar rootroot[ldconfig] executables = /sbin/ldconfig regularfiles = /etc/ld.so.conf [uidbasics] comment = common files for all jails that need user/group information libraries = /lib/libnsl.so.1, /lib64/libnsl.so.1, /lib/libnss*.so.2, /lib64/libnss*.so.2 regularfiles = /etc/nsswitch.conf includesections = ldconfig [netbasics] comment = common files for all jails that need any internet connectivity libraries = /lib/libnss_dns.so.2, /lib64/libnss_dns.so.2 regularfiles = /etc/resolv.conf, /etc/host.conf, /etc/hosts, /etc/protocols [logbasics] comment = timezone information regularfiles = /etc/localtime need_logsocket = 1 [jk_lsh] comment = Jailkit limited shell executables = /usr/sbin/jk_lsh regularfiles = /etc/jailkit/jk_lsh.ini users = root groups = root need_logsocket = 1 includesections = uidbasics [limitedshell] comment = alias for jk_lsh includesections = jk_lsh [cvs] comment = Concurrent Versions System executables = /usr/bin/cvs devices = /dev/null [git] comment = Fast Version Control System executables = /usr/bin/git* directories = /usr/share/git-core includesections = editors [scp] comment = ssh secure copy executables = /usr/bin/scp includesections = netbasics, uidbasics devices = /dev/urandom [sftp] comment = ssh secure ftp executables = /usr/lib/sftp-server, /usr/libexec/openssh/sftp-server, /usr/lib/misc/sftp-server, /usr/libexec/sftp-server includesections = netbasics, uidbasics devices = /dev/urandom, /dev/null [ssh] comment = ssh secure shell executables = /usr/bin/ssh includesections = netbasics, uidbasics devices = /dev/urandom, /dev/tty [rsync] executables = /usr/bin/rsync includesections = netbasics, uidbasics [procmail] comment = procmail mail delivery executables = /usr/bin/procmail, /bin/sh devices = /dev/null [basicshell] comment = bash based shell with several basic utilities executables = /bin/sh, /bin/bash, /bin/ls, /bin/cat, /bin/chmod, /bin/mkdir, /bin/cp, /bin/cpio, /bin/date, /bin/dd, /bin/echo, /bin/egrep, /bin/false, /bin/fgrep, /bin/grep, /bin/gunzip, /bin/gzip, /bin/ln, /bin/ls, /bin/mkdir, /bin/mktemp, /bin/more, /bin/mv, /bin/pwd, /bin/rm, /bin/rmdir, /bin/sed, /bin/sh, /bin/sleep, /bin/sync, /bin/tar, /bin/touch, /bin/true, /bin/uncompress, /bin/zcat regularfiles = /etc/motd, /etc/issue, /etc/bash.bashrc, /etc/bashrc, /etc/profile #directories = users = root groups = root includesections = uidbasics [midnightcommander] comment = Midnight Commander executables = /usr/bin/mc, /usr/bin/mcedit, /usr/bin/mcview directories = /etc/terminfo, /usr/share/terminfo, /usr/share/mc includesections = basicshell [extendedshell] comment = bash shell including things like awk, bzip, tail, less executables = /usr/bin/awk, /bin/bzip2, /bin/bunzip2, /usr/bin/ldd, /usr/bin/less, /usr/bin/clear, /usr/bin/cut, /usr/bin/du, /usr/bin/find, /usr/bin/head, /usr/bin/md5sum, /usr/bin/nice, /usr/bin/sort, /usr/bin/tac, /usr/bin/tail, /usr/bin/tr, /usr/bin/wc, /usr/bin/watch, /usb/bin/whoami includesections = basicshell, midnightcommander, editors [editors] comment = joe and nano executables = /usr/bin/joe, /usr/bin/nano, /usr/bin/vi, /usr/bin/vim regularfiles = /etc/vimrc directories = /etc/joe, /etc/terminfo, /usr/share/vim, /usr/share/terminfo, /usr/lib/terminfo [netutils] comment = several internet utilities like curl, wget, ftp, rsync, scp, ssh executables = /usr/bin/curl /usr/bin/wget, /usr/bin/lynx, /usr/bin/ftp, /usr/bin/host, /usr/bin/rsync, /usr/bin/smbclient includesections = netbasics, ssh, sftp, scp directories = /etc/ssl/certs/ regularfiles = /usr/lib/ssl/certs [apacheutils] comment = htpasswd utility executables = /usr/bin/htpasswd [extshellplusnet] comment = alias for extendedshell + netutils + apacheutils includesections = extendedshell, netutils, apacheutils [openvpn] comment = jail for the openvpn daemon executables = /usr/sbin/openvpn users = root,nobody groups = root,nogroup includesections = netbasics devices = /dev/urandom, /dev/random, /dev/net/tun includesections = netbasics, uidbasics need_logsocket = 1 [apache] comment = the apache webserver, very basic setup, probably too limited for you executables = /usr/sbin/apache2 users = root, apache groups = root, apache includesections = netbasics, uidbasics [perl] comment = the perl interpreter and libraries executables = /usr/bin/perl directories = /usr/lib/perl, /usr/lib/perl5, /usr/share/perl, /usr/share/perl5 [xauth] comment = getting X authentication to work executables = /usr/bin/X11/xauth regularfiles = /usr/X11R6/lib/X11/rgb.txt, /etc/ld.so.conf [xclients] comment = minimal files for X clients regularfiles = /usr/X11R6/lib/X11/rgb.txt includesections = xauth [vncserver] comment = the VNC server program executables = /usr/bin/Xvnc, /usr/bin/Xrealvnc directories = /usr/X11R6/lib/X11/fonts/ includesections = xclients #[xterm] #comment = xterm #executables = /usr/bin/X11/xterm #directories = /usr/share/terminfo, /etc/terminfo #devices = /dev/pts/0, /dev/pts/1, /dev/pts/2, /dev/pts/3, /dev/pts/4, /dev/ptyb4, /dev/ptya4, /dev/tty, /dev/tty0, /dev/tty4 ispconfig3_install/install/dist/tpl/gentoo/apache_apps_fcgi_starter.master0000775000000000000000000000030315114346020026263 0ustar rootroot#!/bin/sh PHPRC=/etc/php/cgi-php5/ export PHPRC export PHP_FCGI_MAX_REQUESTS=5000 export PHP_FCGI_CHILDREN=1 export PHP_FCGI_MAX_REQUESTLEN=15728640 exec /usr/bin/php-cgi -d magic_quotes_gpc=off ispconfig3_install/install/dist/tpl/gentoo/dovecot.conf.master0000775000000000000000000000347415114346020023666 0ustar rootrootprotocols = imap imaps pop3 pop3s disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_privileged_group = mail ssl_cert_file = /etc/ssl/dovecot/server.crt ssl_key_file = /etc/ssl/dovecot/server.key ## ## IMAP specific settings ## protocol imap { login_executable = /usr/libexec/dovecot/imap-login mail_executable = /usr/libexec/dovecot/imap mail_plugins = quota imap_quota mail_plugin_dir = /usr/lib/dovecot/imap } ## ## POP3 specific settings ## protocol pop3 { login_executable = /usr/libexec/dovecot/pop3-login mail_executable = /usr/libexec/dovecot/pop3 pop3_uidl_format = %08Xu%08Xv mail_plugins = quota mail_plugin_dir = /usr/lib/dovecot/pop3 } ## ## LDA specific settings ## protocol lda { postmaster_address = postmaster@example.com mail_plugin_dir = /usr/lib/dovecot/lda auth_socket_path = /var/run/dovecot/auth-master mail_plugins = sieve quota } ## Plugin settings plugin { quota = maildir sieve=/var/vmail/%d/%n/.sieve } ## ## Authentication processes ## auth default { mechanisms = plain login passdb pam { args = "*" } # SQL database passdb sql { # Path for SQL configuration file args = /etc/dovecot/dovecot-sql.conf } # new quota support: userdb prefetch { } userdb sql { args = /etc/dovecot/dovecot-sql.conf } ## dovecot-lda specific settings ## socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail # User running Dovecot LDA #group = vmail # Or alternatively mode 0660 + LDA user in this group } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } mail_location = maildir:/var/vmail/%d/%n/Maildir mail_uid = 5000 mail_gid = 5000 ispconfig3_install/install/dist/lib/0000775000000000000000000000000015273367323016542 5ustar rootrootispconfig3_install/install/dist/lib/centos80.lib.php0000775000000000000000000000336415114346020021455 0ustar rootroot ispconfig3_install/install/dist/lib/centos52.lib.php0000775000000000000000000000334715114346020021455 0ustar rootroot ispconfig3_install/install/dist/lib/centos72.lib.php0000775000000000000000000000336415114346020021456 0ustar rootroot ispconfig3_install/install/dist/lib/opensuse.lib.php0000775000000000000000000021003715273367323021667 0ustar rootrootlng(' WARNING! You are using mod_authz_compat.')); swriteln($inst->lng(' Please make sure that your apache config uses the new auth syntax:')); swriteln($inst->lng(' ')); swriteln($inst->lng(' Options None')); swriteln($inst->lng(' AllowOverride None')); swriteln($inst->lng(' Require all denied')); swriteln($inst->lng(' '."\n")); swriteln($inst->lng(' If it uses the old syntax (deny from all) ISPConfig would fail to work.')); } } function configure_postfix($options = '') { global $conf,$autoinstall; $cf = $conf['postfix']; $config_dir = $cf['config_dir']; if(!is_dir($config_dir)){ $this->error("The postfix configuration directory '$config_dir' does not exist."); } //* Install virtual mappings foreach (glob('tpl/mysql-virtual_*.master') as $filename) { $this->process_postfix_config( basename($filename, '.master') ); } //* mysql-verify_recipients.cf $this->process_postfix_config('mysql-verify_recipients.cf'); //* postfix-dkim $filename='tag_as_originating.re'; $full_file_name=$config_dir.'/'.$filename; if(is_file($full_file_name)) copy($full_file_name, $full_file_name.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/postfix-'.$filename.'.master', 'tpl/postfix-'.$filename.'.master'); wf($full_file_name, $content); $filename='tag_as_foreign.re'; $full_file_name=$config_dir.'/'.$filename; if(is_file($full_file_name)) copy($full_file_name, $full_file_name.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/postfix-'.$filename.'.master', 'tpl/postfix-'.$filename.'.master'); wf($full_file_name, $content); if(!is_dir($cf['vmail_mailbox_base'])) mkdir($cf['vmail_mailbox_base']); //* Creating virtual mail user and group if(is_group($cf['vmail_groupname'])) { $command = 'groupmod -g '.$cf['vmail_groupid'].' '.$cf['vmail_groupname']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } else { $command = 'groupadd -g '.$cf['vmail_groupid'].' '.$cf['vmail_groupname']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } if(is_user($cf['vmail_username'])) { $command = 'usermod -g '.$cf['vmail_groupname'].' -u '.$cf['vmail_userid'].' -d '.$cf['vmail_mailbox_base'].' -s /bin/bash '.$cf['vmail_username']; caselog("$command > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } else { $command = 'useradd -g '.$cf['vmail_groupname'].' -u '.$cf['vmail_userid'].' '.$cf['vmail_username'].' -d '.$cf['vmail_mailbox_base'].' -m'; caselog("$command > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } if($cf['vmail_mailbox_base'] != '' && strlen($cf['vmail_mailbox_base']) >= 10 && $this->is_update === false) exec('chown -R '.$cf['vmail_username'].':'.$cf['vmail_groupname'].' '.$cf['vmail_mailbox_base']); //* These postconf commands will be executed on installation and update $server_ini_rec = $this->db->queryOneRecord("SELECT config FROM server WHERE server_id = ?", $conf['server_id']); $server_ini_array = ini_to_array(stripslashes($server_ini_rec['config'])); unset($server_ini_rec); //* If there are RBL's defined, format the list and add them to smtp_recipient_restrictions to prevent removeal after an update $rbl_list = ''; if (@isset($server_ini_array['mail']['realtime_blackhole_list']) && $server_ini_array['mail']['realtime_blackhole_list'] != '') { $rbl_hosts = explode(",", str_replace(" ", "", $server_ini_array['mail']['realtime_blackhole_list'])); foreach ($rbl_hosts as $key => $value) { $rbl_list .= ", reject_rbl_client ". $value; } } unset($rbl_hosts); //* If Postgrey is installed, configure it $greylisting = ''; if($conf['postgrey']['installed'] == true) { $greylisting = ', check_recipient_access mysql:/etc/postfix/mysql-virtual_policy_greylist.cf'; } $reject_sender_login_mismatch = ''; $reject_authenticated_sender_login_mismatch = ''; if(isset($server_ini_array['mail']['reject_sender_login_mismatch']) && ($server_ini_array['mail']['reject_sender_login_mismatch'] == 'y')) { $reject_sender_login_mismatch = ', reject_sender_login_mismatch'; $reject_authenticated_sender_login_mismatch = 'reject_authenticated_sender_login_mismatch, '; } # placeholder includes comment char $stress_adaptive_placeholder = '#{stress_adaptive} '; $stress_adaptive = (isset($server_ini_array['mail']['stress_adaptive']) && ($server_ini_array['mail']['stress_adaptive'] == 'y')) ? '' : $stress_adaptive_placeholder; $reject_unknown_client_hostname=''; if (isset($server_ini_array['mail']['reject_unknown']) && ($server_ini_array['mail']['reject_unknown'] == 'client' || $server_ini_array['mail']['reject_unknown'] == 'client_helo')) { $reject_unknown_client_hostname=', reject_unknown_client_hostname'; } $reject_unknown_helo_hostname=''; if ((!isset($server_ini_array['mail']['reject_unknown'])) || $server_ini_array['mail']['reject_unknown'] == 'helo' || $server_ini_array['mail']['reject_unknown'] == 'client_helo') { $reject_unknown_helo_hostname=', reject_unknown_helo_hostname'; } unset($server_ini_array); $myhostname = str_replace('.','\.',$conf['hostname']); $postconf_placeholders = array('{config_dir}' => $config_dir, '{vmail_mailbox_base}' => $cf['vmail_mailbox_base'], '{vmail_userid}' => $cf['vmail_userid'], '{vmail_groupid}' => $cf['vmail_groupid'], '{rbl_list}' => $rbl_list, '{greylisting}' => $greylisting, '{reject_slm}' => $reject_sender_login_mismatch, '{reject_aslm}' => $reject_authenticated_sender_login_mismatch, '{myhostname}' => $myhostname, $stress_adaptive_placeholder => $stress_adaptive, '{reject_unknown_client_hostname}' => $reject_unknown_client_hostname, '{reject_unknown_helo_hostname}' => $reject_unknown_helo_hostname, ); $postconf_tpl = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_postfix.conf.master', 'tpl/opensuse_postfix.conf.master'); $postconf_tpl = strtr($postconf_tpl, $postconf_placeholders); $postconf_commands = array_filter(explode("\n", $postconf_tpl)); // read and remove empty lines //* These postconf commands will be executed on installation only if($this->is_update == false) { $postconf_commands = array_merge($postconf_commands, array( 'myhostname = '.$conf['hostname'], 'mydestination = '.$conf['hostname'].', localhost, localhost.localdomain', 'mynetworks = 127.0.0.0/8 [::1]/128' )); } //* Create the header and body check files touch($config_dir.'/header_checks'); touch($config_dir.'/mime_header_checks'); touch($config_dir.'/nested_header_checks'); touch($config_dir.'/body_checks'); touch($config_dir.'/sasl_passwd'); //* The relay host password map and its indexed copies are readable by root only foreach(glob($config_dir.'/sasl_passwd*') as $f) if(!is_link($f)) chmod($f, 0600); //* Create the mailman files if(!is_dir('/var/lib/mailman/data')) exec('mkdir -p /var/lib/mailman/data'); if(!is_file('/var/lib/mailman/data/aliases')) touch('/var/lib/mailman/data/aliases'); exec('postalias /var/lib/mailman/data/aliases'); if(!is_file('/var/lib/mailman/data/virtual-mailman')) touch('/var/lib/mailman/data/virtual-mailman'); exec('postmap /var/lib/mailman/data/virtual-mailman'); if(!is_file('/var/lib/mailman/data/transport-mailman')) touch('/var/lib/mailman/data/transport-mailman'); exec('/usr/sbin/postmap /var/lib/mailman/data/transport-mailman'); //* Create auxillary postfix conf files $configfile = 'helo_access'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); chmod($config_dir.'/'.$configfile.'~', 0400); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); # todo: look up this server's ip addrs and loop through each # todo: look up domains hosted on this server and loop through each wf($config_dir.'/'.$configfile, $content); $configfile = 'blacklist_helo'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); chmod($config_dir.'/'.$configfile.'~', 0400); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); wf($config_dir.'/'.$configfile, $content); //* Make a backup copy of the main.cf file copy($config_dir.'/main.cf', $config_dir.'/main.cf~'); //* Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); } if(!stristr($options, 'dont-create-certs')) { //* Create the SSL certificate if(AUTOINSTALL){ $command = 'cd '.$config_dir.'; ' ."openssl req -new -subj '/C=".escapeshellcmd($autoinstall['ssl_cert_country'])."/ST=".escapeshellcmd($autoinstall['ssl_cert_state'])."/L=".escapeshellcmd($autoinstall['ssl_cert_locality'])."/O=".escapeshellcmd($autoinstall['ssl_cert_organisation'])."/OU=".escapeshellcmd($autoinstall['ssl_cert_organisation_unit'])."/CN=".escapeshellcmd($autoinstall['ssl_cert_common_name'])."' -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509"; } else { $command = 'cd '.$config_dir.'; ' .'openssl req -new -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509'; } exec($command); $command = 'chmod o= '.$config_dir.'/smtpd.key'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); } //** We have to change the permissions of the courier authdaemon directory to make it accessible for maildrop. $command = 'chmod 755 /var/run/authdaemon.courier-imap'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); //* Check maildrop service in posfix master.cf $regex = "/^maildrop unix.*pipe flags=DRhu user=vmail argv=\\/usr\\/bin\\/maildrop -d ".$cf['vmail_username']." \\$\{extension} \\$\{recipient} \\$\{user} \\$\{nexthop} \\$\{sender}/"; $configfile = $config_dir.'/master.cf'; if($this->get_postfix_service('maildrop', 'unix')) { exec ("postconf -M maildrop.unix 2> /dev/null", $out, $ret); $change_maildrop_flags = @(preg_match($regex, $out[0]) && $out[0] !='')?false:true; } else { $change_maildrop_flags = @(preg_match($regex, $configfile))?false:true; } if ($change_maildrop_flags) { //* Change maildrop service in posfix master.cf if(is_file($config_dir.'/master.cf')) { copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); } if(is_file($config_dir.'/master.cf~')) { chmod($config_dir.'/master.cf~', 0400); } $configfile = $config_dir.'/master.cf'; $content = rf($configfile); $content = str_replace(' flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}', 'flags=DRhu user='.$cf['vmail_username'].' argv=/usr/bin/maildrop -d '.$cf['vmail_username'].' ${extension} ${recipient} ${user} ${nexthop} ${sender}', $content); $content = str_replace(' flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}', 'flags=DRhu user='.$cf['vmail_username'].' argv=/usr/bin/maildrop -d '.$cf['vmail_username'].' ${extension} ${recipient} ${user} ${nexthop} ${sender}', $content); } // enable tlsmanager $content = str_replace('#tlsmgr unix - - n 1000? 1 tlsmgr', 'tlsmgr unix - - n 1000? 1 tlsmgr', $content); wf($configfile, $content); //* Writing the Maildrop mailfilter file $configfile = 'mailfilter'; if(is_file($cf['vmail_mailbox_base'].'/.'.$configfile)){ copy($cf['vmail_mailbox_base'].'/.'.$configfile, $cf['vmail_mailbox_base'].'/.'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{dist_postfix_vmail_mailbox_base}', $cf['vmail_mailbox_base'], $content); wf($cf['vmail_mailbox_base'].'/.'.$configfile, $content); //* Create the directory for the custom mailfilters $command = 'mkdir '.$cf['vmail_mailbox_base'].'/mailfilters'; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Chmod and chown the .mailfilter file $command = 'chown -R '.$cf['vmail_username'].':'.$cf['vmail_groupname'].' '.$cf['vmail_mailbox_base'].'/.mailfilter'; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chmod -R 600 '.$cf['vmail_mailbox_base'].'/.mailfilter'; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_saslauthd() { global $conf; // Edit the file /etc/init.d/saslauthd $configfile = $conf["init_scripts"].'/'.$conf["saslauthd"]["init_script"]; $content = rf($configfile); $content = str_replace('/sbin/startproc $AUTHD_BIN -a $SASLAUTHD_AUTHMECH -n $SASLAUTHD_THREADS > /dev/null 2>&1', '/sbin/startproc $AUTHD_BIN -r -a $SASLAUTHD_AUTHMECH -n $SASLAUTHD_THREADS > /dev/null 2>&1', $content); $content = str_replace('/sbin/startproc $AUTHD_BIN $SASLAUTHD_PARAMS -a $SASLAUTHD_AUTHMECH -n $SASLAUTHD_THREADS > /dev/null 2>&1', '/sbin/startproc $AUTHD_BIN $SASLAUTHD_PARAMS -r -a $SASLAUTHD_AUTHMECH -n $SASLAUTHD_THREADS > /dev/null 2>&1', $content); if(is_file($configfile)) wf($configfile, $content); } public function configure_pam() { global $conf; $pam = $conf['pam']; //* configure pam for SMTP authentication agains the ispconfig database $configfile = 'pamd_smtp'; if(is_file("$pam/smtp")) copy("$pam/smtp", "$pam/smtp~"); if(is_file("$pam/smtp~")) exec("chmod 400 $pam/smtp~"); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_ip}', $conf['mysql']['ip'], $content); wf("$pam/smtp", $content); // On some OSes smtp is world readable which allows for reading database information. Removing world readable rights should have no effect. if(is_file("$pam/smtp")) exec("chmod o= $pam/smtp"); } public function configure_courier() { global $conf; $config_dir = $conf['courier']['config_dir']; //* authmysqlrc $configfile = 'authmysqlrc'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } exec("chmod 400 $config_dir/$configfile~"); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); wf("$config_dir/$configfile", $content); exec("chmod 660 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); //* authdaemonrc $configfile = $conf['courier']['config_dir'].'/authdaemonrc'; if(is_file($configfile)){ copy($configfile, $configfile.'~'); } if(is_file($configfile.'~')){ exec('chmod 400 '.$configfile.'~'); } $content = rf($configfile); $content = str_replace('authmodulelist=', 'authmodulelist="authmysql"', $content); wf($configfile, $content); } public function configure_dovecot() { global $conf; $virtual_transport = 'dovecot'; $configure_lmtp = false; // check if virtual_transport must be changed if ($this->is_update) { $tmp = $this->db->queryOneRecord("SELECT * FROM ?? WHERE server_id = ?", $conf["mysql"]["database"] . ".server", $conf['server_id']); $ini_array = ini_to_array(stripslashes($tmp['config'])); // ini_array needs not to be checked, because already done in update.php -> updateDbAndIni() if(isset($ini_array['mail']['mailbox_virtual_uidgid_maps']) && $ini_array['mail']['mailbox_virtual_uidgid_maps'] == 'y') { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; $configure_lmtp = true; } } $config_dir = $conf['postfix']['config_dir']; //* Configure master.cf and add a line for deliver if(!$this->get_postfix_service('dovecot', 'unix')) { //* backup if(is_file($config_dir.'/master.cf')){ copy($config_dir.'/master.cf', $config_dir.'/master.cf~2'); } if(is_file($config_dir.'/master.cf~2')){ chmod($config_dir.'/master.cf~2', 0400); } //* Configure master.cf and add a line for deliver $content = rf($conf["postfix"]["config_dir"].'/master.cf'); $deliver_content = 'dovecot unix - n n - - pipe'."\n".' flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop}'."\n"; af($conf["postfix"]["config_dir"].'/master.cf', $deliver_content); unset($content); unset($deliver_content); } //* Reconfigure postfix to use dovecot authentication // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'dovecot_destination_recipient_limit = 1', 'virtual_transport = '.$virtual_transport, 'smtpd_sasl_type = dovecot', 'smtpd_sasl_path = private/auth', ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~3'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['dovecot']['config_dir']; //* backup dovecot.conf $configfile = 'dovecot.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } //* Get the dovecot version exec('dovecot --version', $tmp); $parts = explode('.', trim($tmp[0])); $dovecot_version = $parts[0]; unset($tmp); unset($parts); //* Copy dovecot configuration file if($dovecot_version == 2) { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_dovecot2.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_dovecot2.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/opensuse_dovecot2.conf.master', $config_dir.'/'.$configfile); } replaceLine($config_dir.'/'.$configfile, 'postmaster_address = postmaster@example.com', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); replaceLine($config_dir.'/'.$configfile, 'postmaster_address = webmaster@localhost', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); } else { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_dovecot.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_dovecot.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/opensuse_dovecot.conf.master', $config_dir.'/'.$configfile); } } //* dovecot-lmtpd if($configure_lmtp) { replaceLine($config_dir.'/'.$configfile, 'protocols = imap pop3', 'protocols = imap pop3 lmtp', 1, 0); } //* dovecot-sql.conf $configfile = 'dovecot-sql.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); exec("chmod 400 $config_dir/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_dovecot-sql.conf.master', "tpl/opensuse_dovecot-sql.conf.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); # enable iterate_query for dovecot2 if(version_compare($dovecot_version,2, '>=')) { $content = str_replace('# iterate_query', 'iterate_query', $content); } wf("$config_dir/$configfile", $content); exec("chmod 600 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); // Dovecot shall ignore mounts in website directory if(is_installed('doveadm')) exec("doveadm mount add '/srv/www/*' ignore > /dev/null 2> /dev/null"); } public function configure_amavis() { global $conf; // amavisd user config file $configfile = 'opensuse_amavisd_conf'; if(is_file($conf["amavis"]["config_dir"].'/amavisd.conf')) @copy($conf["amavis"]["config_dir"].'/amavisd.conf', $conf["amavis"]["config_dir"].'/amavisd.conf~'); if(is_file($conf["amavis"]["config_dir"].'/amavisd.conf~')) exec('chmod 400 '.$conf["amavis"]["config_dir"].'/amavisd.conf~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/".$configfile.".master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_port}', $conf["mysql"]["port"], $content); $content = str_replace('{mysql_server_ip}', $conf['mysql']['ip'], $content); $content = str_replace('{hostname}', $conf['hostname'], $content); $content = str_replace('{amavis_config_dir}', $conf['amavis']['config_dir'], $content); wf($conf["amavis"]["config_dir"].'/amavisd.conf', $content); chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'content_filter = amavis:[127.0.0.1]:10024', 'receive_override_options = no_address_mappings' ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~2'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['postfix']['config_dir']; // Adding amavis-services to the master.cf file // backup master.cf if(is_file($config_dir.'/master.cf')) copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); // first remove the old service definitions $this->remove_postfix_service('amavis','unix'); $this->remove_postfix_service('127.0.0.1:10025','inet'); $this->remove_postfix_service('127.0.0.1:10027','inet'); // then add them back $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis.master', 'tpl/master_cf_amavis.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10025.master', 'tpl/master_cf_amavis10025.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10027.master', 'tpl/master_cf_amavis10027.master'); af($config_dir.'/master.cf', $content); unset($content); // Add the clamav user to the vscan group //exec('groupmod --add-user clamav vscan'); $command = 'usermod -a -G clamav vscan'; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_spamassassin() { global $conf; //* Enable spamasasssin on debian and ubuntu /* $configfile = '/etc/default/spamassassin'; if(is_file($configfile)){ copy($configfile, $configfile.'~'); } $content = rf($configfile); $content = str_replace('ENABLED=0', 'ENABLED=1', $content); wf($configfile, $content); */ } public function configure_getmail() { global $conf; $config_dir = $conf['getmail']['config_dir']; if(!is_dir($config_dir)) exec("mkdir -p ".escapeshellcmd($config_dir)); $command = "useradd -d $config_dir getmail"; if(!is_user('getmail')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "chown -R getmail $config_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "chmod -R 700 $config_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_pureftpd() { global $conf; $config_dir = $conf['pureftpd']['config_dir']; //* configure pam for SMTP authentication agains the ispconfig database $configfile = 'db/mysql.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } if(is_file("$config_dir/$configfile~")){ exec("chmod 400 $config_dir/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/pureftpd_mysql.conf.master', 'tpl/pureftpd_mysql.conf.master'); $content = str_replace('{mysql_server_ispconfig_user}', $conf["mysql"]["ispconfig_user"], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf["mysql"]["ispconfig_password"], $content); $content = str_replace('{mysql_server_database}', $conf["mysql"]["database"], $content); $content = str_replace('{mysql_server_ip}', $conf["mysql"]["ip"], $content); $content = str_replace('{server_id}', $conf["server_id"], $content); wf("$config_dir/$configfile", $content); exec("chmod 600 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); // copy our customized copy of pureftpd.conf to the pure-ftpd config directory if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/opensuse_pureftpd_conf.master')) { exec("cp " . $conf['ispconfig_install_dir']."/server/conf-custom/install/opensuse_pureftpd_conf.master $config_dir/pure-ftpd.conf"); } else { exec("cp tpl/opensuse_pureftpd_conf.master $config_dir/pure-ftpd.conf"); } } public function configure_mydns() { global $conf; // configure mydns $configfile = 'mydns.conf'; if(is_file($conf["mydns"]["config_dir"].'/'.$configfile)) copy($conf["mydns"]["config_dir"].'/'.$configfile, $conf["mydns"]["config_dir"].'/'.$configfile.'~'); if(is_file($conf["mydns"]["config_dir"].'/'.$configfile.'~')) exec('chmod 400 '.$conf["mydns"]["config_dir"].'/'.$configfile.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/".$configfile.".master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf["mysql"]["host"], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf["server_id"], $content); wf($conf["mydns"]["config_dir"].'/'.$configfile, $content); exec('chmod 600 '.$conf["mydns"]["config_dir"].'/'.$configfile); exec('chown root:root '.$conf["mydns"]["config_dir"].'/'.$configfile); } public function configure_apache() { global $conf; if($conf['apache']['installed'] == false) return; //* Create the logging directory for the vhost logfiles exec('mkdir -p /var/log/ispconfig/httpd'); //* enable apache logio module exec('a2enmod logio'); //if(is_file('/etc/suphp.conf')) { replaceLine('/etc/suphp.conf', 'php=php', 'x-httpd-suphp="php:/srv/www/cgi-bin/php5"', 0, 0); replaceLine('/etc/suphp.conf', 'php="php', 'x-httpd-suphp="php:/srv/www/cgi-bin/php5"', 0, 0); replaceLine('/etc/suphp.conf', 'docroot=', 'docroot=/srv/www', 0, 0); replaceLine('/etc/suphp.conf', 'umask=0077', 'umask=0022', 0); //} if(!file_exists('/srv/www/cgi-bin/php5') && file_exists('/srv/www/cgi-bin/php')) { symlink('/srv/www/cgi-bin/php', '/srv/www/cgi-bin/php5'); } // Sites enabled and available dirs exec('mkdir -p '.$conf['apache']['vhost_conf_enabled_dir']); exec('mkdir -p '.$conf['apache']['vhost_conf_dir']); $content = rf('/etc/apache2/httpd.conf'); if(!stristr($content, 'Include /etc/apache2/sites-enabled/')) { af('/etc/apache2/httpd.conf', "\n\n Options +FollowSymlinks\n\n\nInclude /etc/apache2/sites-enabled/\n\n"); } unset($content); //* Copy the ISPConfig configuration include $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; $tpl = new tpl('apache_ispconfig.conf.master'); $tpl->setVar('apache_version',getapacheversion()); if($this->is_update == true) { $tpl->setVar('logging',get_logging_state()); } else { $tpl->setVar('logging','yes'); } $records = $this->db->queryAllRecords("SELECT * FROM ?? WHERE server_id = ? AND virtualhost = 'y'", $conf['mysql']['master_database'] . '.server_ip', $conf['server_id']); $ip_addresses = array(); if(is_array($records) && count($records) > 0) { foreach($records as $rec) { if($rec['ip_type'] == 'IPv6') { $ip_address = '['.$rec['ip_address'].']'; } else { $ip_address = $rec['ip_address']; } $ports = explode(',', $rec['virtualhost_port']); if(is_array($ports)) { foreach($ports as $port) { $port = intval($port); if($port > 0 && $port < 65536 && $ip_address != '') { $ip_addresses[] = array('ip_address' => $ip_address, 'port' => $port); } } } } } if(count($ip_addresses) > 0) $tpl->setLoop('ip_adresses',$ip_addresses); wf($vhost_conf_dir.'/ispconfig.conf', $tpl->grab()); unset($tpl); if(!@is_link($vhost_conf_enabled_dir."/000-ispconfig.conf")) { exec("ln -s ".$vhost_conf_dir."/ispconfig.conf ".$vhost_conf_enabled_dir."/000-ispconfig.conf"); } //* make sure that webalizer finds its config file when it is directly in /etc if(@is_file('/etc/webalizer.conf') && !@is_dir('/etc/webalizer')) { exec('mkdir /etc/webalizer'); exec('ln -s /etc/webalizer.conf /etc/webalizer/webalizer.conf'); } if(is_file('/etc/webalizer/webalizer.conf')) { // Change webalizer mode to incremental replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental yes', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName webalizer.hist', 0, 0); } //* add a sshusers group $command = 'groupadd sshusers'; if(!is_group('sshusers')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); // create PHP-FPM pool dir exec('mkdir -p '.$conf['nginx']['php_fpm_pool_dir']); $content = rf('/etc/php5/fpm/php-fpm.conf'); if(stripos($content, 'include=/etc/php5/fpm/pool.d/*.conf') === false){ af('/etc/php5/fpm/php-fpm.conf', "\ninclude=/etc/php5/fpm/pool.d/*.conf"); } unset($content); if(!@is_file($conf['nginx']['php_fpm_ini_path'])){ if(@is_file('/etc/php5/cli/php.ini')){ exec('cp -f /etc/php5/cli/php.ini '.$conf['nginx']['php_fpm_ini_path']); } elseif(@is_file('/etc/php5/fastcgi/php.ini')){ exec('cp -f /etc/php5/fastcgi/php.ini '.$conf['nginx']['php_fpm_ini_path']); } elseif(@is_file('/etc/php5/apache2/php.ini')){ exec('cp -f /etc/php5/apache2/php.ini '.$conf['nginx']['php_fpm_ini_path']); } } } public function configure_nginx(){ global $conf; if($conf['nginx']['installed'] == false) return; //* Create the logging directory for the vhost logfiles if(!@is_dir($conf['ispconfig_log_dir'].'/httpd')) mkdir($conf['ispconfig_log_dir'].'/httpd', 0755, true); // Sites enabled and available dirs exec('mkdir -p '.$conf['nginx']['vhost_conf_enabled_dir']); exec('mkdir -p '.$conf['nginx']['vhost_conf_dir']); $content = rf('/etc/nginx/nginx.conf'); if(stripos($content, 'include /etc/nginx/sites-enabled/*.vhost;') === false){ $content = trim($content); $content = substr($content, 0, -1)."\n include /etc/nginx/sites-enabled/*.vhost;\n}"; wf('/etc/nginx/nginx.conf', $content); } unset($content); // create PHP-FPM pool dir exec('mkdir -p '.$conf['nginx']['php_fpm_pool_dir']); $content = rf('/etc/php5/fpm/php-fpm.conf'); if(stripos($content, 'include=/etc/php5/fpm/pool.d/*.conf') === false){ af('/etc/php5/fpm/php-fpm.conf', "\ninclude=/etc/php5/fpm/pool.d/*.conf"); } unset($content); if(!@is_file($conf['nginx']['php_fpm_ini_path'])){ if(@is_file('/etc/php5/cli/php.ini')){ exec('cp -f /etc/php5/cli/php.ini '.$conf['nginx']['php_fpm_ini_path']); } elseif(@is_file('/etc/php5/fastcgi/php.ini')){ exec('cp -f /etc/php5/fastcgi/php.ini '.$conf['nginx']['php_fpm_ini_path']); } elseif(@is_file('/etc/php5/apache2/php.ini')){ exec('cp -f /etc/php5/apache2/php.ini '.$conf['nginx']['php_fpm_ini_path']); } } //* make sure that webalizer finds its config file when it is directly in /etc if(@is_file('/etc/webalizer.conf') && !@is_dir('/etc/webalizer')) { mkdir('/etc/webalizer'); symlink('/etc/webalizer.conf', '/etc/webalizer/webalizer.conf'); } if(is_file('/etc/webalizer/webalizer.conf')) { // Change webalizer mode to incremental replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental yes', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName webalizer.hist', 0, 0); } // Check the awsatst script if(!is_dir('/usr/share/awstats/tools')) exec('mkdir -p /usr/share/awstats/tools'); if(!file_exists('/usr/share/awstats/tools/awstats_buildstaticpages.pl') && file_exists('/usr/share/doc/awstats/examples/awstats_buildstaticpages.pl')) symlink('/usr/share/doc/awstats/examples/awstats_buildstaticpages.pl', '/usr/share/awstats/tools/awstats_buildstaticpages.pl'); if(file_exists('/etc/awstats/awstats.conf.local')) replaceLine('/etc/awstats/awstats.conf.local', 'LogFormat=4', 'LogFormat=1', 0, 1); //* add a sshusers group $command = 'groupadd sshusers'; if(!is_group('sshusers')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); // add anonymized log option to nginxx.conf file $nginx_conf_file = $conf['nginx']['config_dir'].'/nginx.conf'; if(is_file($nginx_conf_file)) { $tmp = file_get_contents($nginx_conf_file); if(!stristr($tmp, 'log_format anonymized')) { copy($nginx_conf_file,$nginx_conf_file.'~'); replaceLine($nginx_conf_file, 'http {', "http {\n\n".file_get_contents('tpl/nginx_anonlog.master'), 0, 0); } } } public function configure_bastille_firewall() { global $conf; $dist_init_scripts = $conf['init_scripts']; if(is_dir("/etc/Bastille.backup")) caselog("rm -rf /etc/Bastille.backup", __FILE__, __LINE__); if(is_dir("/etc/Bastille")) caselog("mv -f /etc/Bastille /etc/Bastille.backup", __FILE__, __LINE__); @mkdir("/etc/Bastille", octdec($directory_mode)); if(is_dir("/etc/Bastille.backup/firewall.d")) caselog("cp -pfr /etc/Bastille.backup/firewall.d /etc/Bastille/", __FILE__, __LINE__); if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/bastille-firewall.cfg.master')) { caselog("cp -f " . $conf['ispconfig_install_dir']."/server/conf-custom/install/bastille-firewall.cfg.master /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); } else { caselog("cp -f tpl/bastille-firewall.cfg.master /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); } caselog("chmod 644 /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); $content = rf("/etc/Bastille/bastille-firewall.cfg"); $content = str_replace("{DNS_SERVERS}", "", $content); $tcp_public_services = ''; $udp_public_services = ''; $row = $this->db->queryOneRecord('SELECT * FROM ?? WHERE server_id = ?', $conf["mysql"]["database"] . '.firewall', $conf['server_id']); if(trim($row["tcp_port"]) != '' || trim($row["udp_port"]) != ''){ $tcp_public_services = trim(str_replace(',', ' ', $row["tcp_port"])); $udp_public_services = trim(str_replace(',', ' ', $row["udp_port"])); } else { $tcp_public_services = '21 22 25 53 80 110 443 3306 8080 10000'; $udp_public_services = '53'; } if(!stristr($tcp_public_services, $conf['apache']['vhost_port'])) { $tcp_public_services .= ' '.intval($conf['apache']['vhost_port']); if($row["tcp_port"] != '') $this->db->query("UPDATE firewall SET tcp_port = tcp_port + ? WHERE server_id = ?", ',' . intval($conf['apache']['vhost_port']), $conf['server_id']); } $content = str_replace("{TCP_PUBLIC_SERVICES}", $tcp_public_services, $content); $content = str_replace("{UDP_PUBLIC_SERVICES}", $udp_public_services, $content); wf("/etc/Bastille/bastille-firewall.cfg", $content); if(is_file($dist_init_scripts."/bastille-firewall")) caselog("mv -f $dist_init_scripts/bastille-firewall $dist_init_scripts/bastille-firewall.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-firewall $dist_init_scripts", __FILE__, __LINE__); caselog("chmod 700 $dist_init_scripts/bastille-firewall", __FILE__, __LINE__); if(is_file("/sbin/bastille-ipchains")) caselog("mv -f /sbin/bastille-ipchains /sbin/bastille-ipchains.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-ipchains /sbin", __FILE__, __LINE__); caselog("chmod 700 /sbin/bastille-ipchains", __FILE__, __LINE__); if(is_file("/sbin/bastille-netfilter")) caselog("mv -f /sbin/bastille-netfilter /sbin/bastille-netfilter.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-netfilter /sbin", __FILE__, __LINE__); caselog("chmod 700 /sbin/bastille-netfilter", __FILE__, __LINE__); if(!@is_dir('/var/lock/subsys')) caselog("mkdir /var/lock/subsys", __FILE__, __LINE__); exec("which iptables > /dev/null 2>&1", $iptables_location, $ret_val); if(!is_file("/sbin/iptables") && !is_link("/sbin/iptables") && $ret_val == 0) phpcaselog(@symlink(trim(shell_exec("which iptables")), "/sbin/iptables"), 'create symlink', __FILE__, __LINE__); unset($iptables_location); } public function install_ispconfig() { global $conf; $install_dir = $conf['ispconfig_install_dir']; //* Create the ISPConfig installation directory if(!@is_dir("$install_dir")) { $command = "mkdir $install_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Create a ISPConfig user and group $command = 'groupadd ispconfig'; if(!is_group('ispconfig')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "useradd -g ispconfig -d $install_dir ispconfig"; if(!is_user('ispconfig')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig interface part $command = "cp -rf ../interface $install_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig server part $command = "cp -rf ../server $install_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make a backup of the security settings if(is_file('/usr/local/ispconfig/security/security_settings.ini')) copy('/usr/local/ispconfig/security/security_settings.ini','/usr/local/ispconfig/security/security_settings.ini~'); //* copy the ISPConfig security part $command = 'cp -rf ../security '.$install_dir; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Apply changed security_settings.ini values to new security_settings.ini file if(is_file('/usr/local/ispconfig/security/security_settings.ini~')) { $security_settings_old = ini_to_array(file_get_contents('/usr/local/ispconfig/security/security_settings.ini~')); $security_settings_new = ini_to_array(file_get_contents('/usr/local/ispconfig/security/security_settings.ini')); if(is_array($security_settings_new) && is_array($security_settings_old)) { foreach($security_settings_new as $section => $sval) { if(is_array($sval)) { foreach($sval as $key => $val) { if(isset($security_settings_old[$section]) && isset($security_settings_old[$section][$key])) { $security_settings_new[$section][$key] = $security_settings_old[$section][$key]; } } } } file_put_contents('/usr/local/ispconfig/security/security_settings.ini',array_to_ini($security_settings_new)); } } //* Create a symlink, so ISPConfig is accessible via web // Replaced by a separate vhost definition for port 8080 // $command = "ln -s $install_dir/interface/web/ /var/www/ispconfig"; // caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Create the config file for ISPConfig interface $configfile = 'config.inc.php'; if(is_file($install_dir.'/interface/lib/'.$configfile)){ copy("$install_dir/interface/lib/$configfile", "$install_dir/interface/lib/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{mysql_master_server_client_flags}', (isset($conf['mysql']['master_client_flags']) ? intval($conf['mysql']['master_client_flags']) : 0), $content); $content = str_replace('{mysql_server_client_flags}', (isset($conf['mysql']['client_flags']) ? intval($conf['mysql']['client_flags']) : 0), $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf("$install_dir/interface/lib/$configfile", $content); //* Create the config file for ISPConfig server $configfile = 'config.inc.php'; if(is_file($install_dir.'/server/lib/'.$configfile)){ copy("$install_dir/server/lib/$configfile", "$install_dir/server/lib/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{mysql_master_server_client_flags}', (isset($conf['mysql']['master_client_flags']) ? intval($conf['mysql']['master_client_flags']) : 0), $content); $content = str_replace('{mysql_server_client_flags}', (isset($conf['mysql']['client_flags']) ? intval($conf['mysql']['client_flags']) : 0), $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf("$install_dir/server/lib/$configfile", $content); //* Create the config file for remote-actions (but only, if it does not exist, because // the value is a autoinc-value and so changed by the remoteaction_core_module if (!file_exists($install_dir.'/server/lib/remote_action.inc.php')) { $content = ''; wf($install_dir.'/server/lib/remote_action.inc.php', $content); } //* Enable the server modules and plugins. // TODO: Implement a selector which modules and plugins shall be enabled. $dir = $install_dir.'/server/mods-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/mods-available/'.$file; $module_name = substr($file, 0, -8); $tmp = new $module_name; if($tmp->onInstall()) { if(!@is_link($install_dir.'/server/mods-enabled/'.$file)) @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-enabled/'.$file); if (strpos($file, '_core_module') !== false) { if(!@is_link($install_dir.'/server/mods-core/'.$file)) @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-core/'.$file); } } unset($tmp); } } closedir($dh); } } $dir = $install_dir.'/server/plugins-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($conf['apache']['installed'] == true && $file == 'nginx_plugin.inc.php') continue; if($conf['nginx']['installed'] == true && $file == 'apache2_plugin.inc.php') continue; if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/plugins-available/'.$file; $plugin_name = substr($file, 0, -8); $tmp = new $plugin_name; if($tmp->onInstall()) { if(!@is_link($install_dir.'/server/plugins-enabled/'.$file)) @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-enabled/'.$file); if (strpos($file, '_core_plugin') !== false) { if(!@is_link($install_dir.'/server/plugins-core/'.$file)) @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-core/'.$file); } } unset($tmp); } } closedir($dh); } } // Update the server config $mail_server_enabled = ($conf['services']['mail'])?1:0; $web_server_enabled = ($conf['services']['web'])?1:0; $dns_server_enabled = ($conf['services']['dns'])?1:0; $file_server_enabled = ($conf['services']['file'])?1:0; $db_server_enabled = ($conf['services']['db'])?1:0; $vserver_server_enabled = ($conf['services']['vserver'])?1:0; $sql = "UPDATE `server` SET mail_server = ?, web_server = ?, dns_server = ?, file_server = ?, db_server = ?, vserver_server = ? WHERE server_id = ?"; $this->db->query($sql, $mail_server_enabled, $web_server_enabled, $dns_server_enabled, $file_server_enabled, $db_server_enabled, $vserver_server_enabled, $conf['server_id']); if($conf['mysql']['master_slave_setup'] == 'y') { $this->dbmaster->query($sql, $mail_server_enabled, $web_server_enabled, $dns_server_enabled, $file_server_enabled, $db_server_enabled, $vserver_server_enabled, $conf['server_id']); } // chown install dir to root and chmod 755 $command = 'chown root:root '.$install_dir; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chmod 755 '.$install_dir; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Chmod the files and directories in the install dir $command = 'chmod -R 750 '.$install_dir.'/*'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the interface files to the ispconfig user and group $command = 'chown -R ispconfig:ispconfig '.$install_dir.'/interface'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the extensions directory to the ispconfig user and group $command = 'chown ispconfig:ispconfig '.$install_dir.'/extensions'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the server files to the root user and group $command = 'chown -R root:root '.$install_dir.'/server'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security files to the root user and group $command = 'chown -R root:root '.$install_dir.'/security'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security directory and security_settings.ini to root:ispconfig $command = 'chown root:ispconfig '.$install_dir.'/security/security_settings.ini'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.whitelist'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.htmlfield'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/apache_directives.blacklist'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/nginx_directives.blacklist'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make the global language file directory group writable exec("chmod -R 770 $install_dir/interface/lib/lang"); //* Make the temp directory for language file exports writable exec("chmod -R 770 $install_dir/interface/web/temp"); //* Make all interface language file directories group writable $handle = @opendir($install_dir.'/interface/web'); while ($file = @readdir($handle)) { if ($file != '.' && $file != '..') { if(@is_dir($install_dir.'/interface/web'.'/'.$file.'/lib/lang')) { $handle2 = opendir($install_dir.'/interface/web'.'/'.$file.'/lib/lang'); chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang', 0770); while ($lang_file = @readdir($handle2)) { if ($lang_file != '.' && $lang_file != '..') { chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang/'.$lang_file, 0770); } } } } } //* Make the APS directories group writable exec("chmod -R 770 $install_dir/interface/web/sites/aps_meta_packages"); exec("chmod -R 770 $install_dir/server/aps_packages"); //* make sure that the server config file (not the interface one) is only readable by the root user chmod($install_dir.'/server/lib/config.inc.php', 0600); chown($install_dir.'/server/lib/config.inc.php', 'root'); chgrp($install_dir.'/server/lib/config.inc.php', 'root'); //* Make sure thet the interface config file is readable by user ispconfig only chmod($install_dir.'/interface/lib/config.inc.php', 0600); chown($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); chgrp($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); if(@is_file("$install_dir/server/lib/mysql_clientdb.conf")) { exec("chmod 600 $install_dir/server/lib/mysql_clientdb.conf"); exec("chown root:root $install_dir/server/lib/mysql_clientdb.conf"); } if(@is_file("$install_dir/server/lib/postgresql_clientdb.conf")) { exec("chmod 600 $install_dir/server/lib/postgresql_clientdb.conf"); exec("chown root:root $install_dir/server/lib/postgresql_clientdb.conf"); } if(is_dir($install_dir.'/interface/invoices')) { exec('chmod -R 770 '.escapeshellarg($install_dir.'/interface/invoices')); exec('chown -R ispconfig:ispconfig '.escapeshellarg($install_dir.'/interface/invoices')); } exec('chown -R root:root /usr/local/ispconfig/interface/ssl'); // TODO: FIXME: add the www-data user to the ispconfig group. This is just for testing // and must be fixed as this will allow the apache user to read the ispconfig files. // Later this must run as own apache server or via suexec! if($conf['apache']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['apache']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['apache']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } if($conf['nginx']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['nginx']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['nginx']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } // add nobody user to www group, as the default php-fpm pool from opensuse runs as nobody $command = 'usermod -a -G www nobody'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Make the shell scripts executable $command = "chmod +x $install_dir/server/scripts/*.sh"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if ($this->install_ispconfig_interface == true && isset($conf['interface_password']) && $conf['interface_password']!='admin') { $sql = "UPDATE sys_user SET passwort = ? WHERE username = 'admin';"; $this->db->query($sql, $this->crypt_password($conf['interface_password'])); } if($conf['apache']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel // TODO: These are missing! should they be "vhost_dist_*_dir" ? $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $tpl = new tpl('apache_ispconfig.vhost.master'); $tpl->setVar('vhost_port',$conf['apache']['vhost_port']); // comment out the listen directive if port is 80 or 443 if($conf['apache']['vhost_port'] == 80 or $conf['apache']['vhost_port'] == 443) { $tpl->setVar('vhost_port_listen','#'); } else { $tpl->setVar('vhost_port_listen',''); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $tpl->setVar('ssl_comment',''); } else { $tpl->setVar('ssl_comment','#'); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key') && is_file($install_dir.'/interface/ssl/ispserver.bundle')) { $tpl->setVar('ssl_bundle_comment',''); } else { $tpl->setVar('ssl_bundle_comment','#'); } $tpl->setVar('apache_version',getapacheversion()); $content = $tpl->grab(); $content = str_replace('/var/www/', '/srv/www/', $content); wf($vhost_conf_dir.'/ispconfig.vhost', $content); //if(!is_file('/srv/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter')) { $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apache_ispconfig_fcgi_starter.master', 'tpl/apache_ispconfig_fcgi_starter.master'); $content = str_replace('{fastcgi_bin}', $conf['fastcgi']['fastcgi_bin'], $content); $content = str_replace('{fastcgi_phpini_path}', $conf['fastcgi']['fastcgi_phpini_path'], $content); exec('mkdir -p /srv/www/php-fcgi-scripts/ispconfig'); $this->set_immutable('/srv/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', false); wf('/srv/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', $content); exec('chmod +x /srv/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter'); exec('ln -s /usr/local/ispconfig/interface/web /srv/www/ispconfig'); exec('chown -R ispconfig:ispconfig /srv/www/php-fcgi-scripts/ispconfig'); $this->set_immutable('/srv/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', true); //} //copy('tpl/apache_ispconfig.vhost.master', "$vhost_conf_dir/ispconfig.vhost"); //* and create the symlink if($this->is_update == false) { if(@is_link("$vhost_conf_enabled_dir/ispconfig.vhost")) unlink("$vhost_conf_enabled_dir/ispconfig.vhost"); if(!@is_link("$vhost_conf_enabled_dir/000-ispconfig.vhost")) { exec("ln -s $vhost_conf_dir/ispconfig.vhost $vhost_conf_enabled_dir/000-ispconfig.vhost"); } } // Fix a setting in vhost master file for suse replaceLine('/usr/local/ispconfig/server/conf/vhost.conf.master', "suPHP_UserGroup", " suPHP_UserGroup ", 0); } if($conf['nginx']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel $vhost_conf_dir = $conf['nginx']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['nginx']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/nginx_ispconfig.vhost.master', 'tpl/nginx_ispconfig.vhost.master'); $content = str_replace('{vhost_port}', $conf['nginx']['vhost_port'], $content); if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $content = str_replace('{ssl_on}', 'ssl', $content); $content = str_replace('{ssl_comment}', '', $content); $content = str_replace('{fastcgi_ssl}', 'on', $content); } else { $content = str_replace('{ssl_on}', '', $content); $content = str_replace('{ssl_comment}', '#', $content); $content = str_replace('{fastcgi_ssl}', 'off', $content); } $socket_dir = escapeshellcmd($conf['nginx']['php_fpm_socket_dir']); if(substr($socket_dir, -1) != '/') $socket_dir .= '/'; if(!is_dir($socket_dir)) exec('mkdir -p '.$socket_dir); $fpm_socket = $socket_dir.'ispconfig.sock'; //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); wf($vhost_conf_dir.'/ispconfig.vhost', $content); unset($content); // PHP-FPM // Dont just copy over the php-fpm pool template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/php_fpm_pool.conf.master', 'tpl/php_fpm_pool.conf.master'); $content = str_replace('{fpm_pool}', 'ispconfig', $content); //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); $content = str_replace('{fpm_user}', 'ispconfig', $content); $content = str_replace('{fpm_group}', 'ispconfig', $content); wf($conf['nginx']['php_fpm_pool_dir'].'/ispconfig.conf', $content); //copy('tpl/nginx_ispconfig.vhost.master', $vhost_conf_dir.'/ispconfig.vhost'); //* and create the symlink if($this->is_update == false) { if(@is_link($vhost_conf_enabled_dir.'/ispconfig.vhost')) unlink($vhost_conf_enabled_dir.'/ispconfig.vhost'); if(!@is_link($vhost_conf_enabled_dir.'/000-ispconfig.vhost')) { symlink($vhost_conf_dir.'/ispconfig.vhost', $vhost_conf_enabled_dir.'/000-ispconfig.vhost'); } } // create symlinks from /usr/share to phpMyAdmin and SquirrelMail, if they are installed if(!@file_exists('/usr/share/phpmyadmin') && @is_dir('/srv/www/htdocs/phpMyAdmin')) symlink('/srv/www/htdocs/phpMyAdmin/', '/usr/share/phpmyadmin'); if(!@file_exists('/usr/share/squirrelmail') && @is_dir('/srv/www/htdocs/squirrelmail')) symlink('/srv/www/htdocs/squirrelmail/', '/usr/share/squirrelmail'); } // Make the Clamav log files readable by ISPConfig //exec('chmod +r /var/log/clamav/clamav.log'); //exec('chmod +r /var/log/clamav/freshclam.log'); //* Install the update script if(is_file('/usr/local/bin/ispconfig_update_from_dev.sh')) unlink('/usr/local/bin/ispconfig_update_from_dev.sh'); exec('chown root /usr/local/ispconfig/server/scripts/update_from_dev.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/update_from_dev.sh'); exec('chown root /usr/local/ispconfig/server/scripts/update_stable.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/update_stable.sh'); exec('chown root /usr/local/ispconfig/server/scripts/ispconfig_update.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/ispconfig_update.sh'); if(!is_link('/usr/local/bin/ispconfig_update_from_dev.sh')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_update.sh /usr/local/bin/ispconfig_update_from_dev.sh'); if(!is_link('/usr/local/bin/ispconfig_update.sh')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_update.sh /usr/local/bin/ispconfig_update.sh'); //set the fast cgi starter script to executable //exec('chmod 755 '.$install_dir.'/interface/bin/php-fcgi'); //To enable apache to read the directories exec('chmod a+rx /usr/local/ispconfig'); exec('chmod -R 751 /usr/local/ispconfig/interface'); exec('chmod a+rx /usr/local/ispconfig/interface/web'); //* Create the ispconfig log directory if(!is_dir($conf['ispconfig_log_dir'])) mkdir($conf['ispconfig_log_dir']); if(!is_file($conf['ispconfig_log_dir'].'/ispconfig.log')) exec('touch '.$conf['ispconfig_log_dir'].'/ispconfig.log'); chmod($conf['ispconfig_log_dir'].'/ispconfig.log', 0600); if(is_dir('/var/log/ispconfig')) exec('chmod o-rw /var/log/ispconfig/*.gz /var/log/ispconfig/*.log 2>/dev/null'); if(is_user('getmail')) { exec('mv /usr/local/ispconfig/server/scripts/run-getmail.sh /usr/local/bin/run-getmail.sh'); exec('chown getmail /usr/local/bin/run-getmail.sh'); exec('chmod 744 /usr/local/bin/run-getmail.sh'); } if(is_dir($install_dir.'/interface/invoices')) { exec('chmod -R 770 '.escapeshellarg($install_dir.'/interface/invoices')); exec('chown -R ispconfig:ispconfig '.escapeshellarg($install_dir.'/interface/invoices')); } //* Create the ispconfig auth log file and set uid/gid if(!is_file($conf['ispconfig_log_dir'].'/auth.log')) { touch($conf['ispconfig_log_dir'].'/auth.log'); } exec('chown ispconfig:ispconfig '. $conf['ispconfig_log_dir'].'/auth.log'); exec('chmod 660 '. $conf['ispconfig_log_dir'].'/auth.log'); //* Remove Domain module as its functions are available in the client module now if(@is_dir('/usr/local/ispconfig/interface/web/domain')) exec('rm -rf /usr/local/ispconfig/interface/web/domain'); // Add symlink for patch tool if(!is_link('/usr/local/bin/ispconfig_patch')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_patch /usr/local/bin/ispconfig_patch'); // Change mode of a few files from amavisd if(is_file($conf['amavis']['config_dir'].'/conf.d/50-user')) chmod($conf['amavis']['config_dir'].'/conf.d/50-user', 0640); if(is_file($conf['amavis']['config_dir'].'/50-user~')) chmod($conf['amavis']['config_dir'].'/50-user~', 0400); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf')) chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf~')) chmod($conf['amavis']['config_dir'].'/amavisd.conf~', 0400); } } ?> ispconfig3_install/install/dist/lib/fedora33.lib.php0000775000000000000000000000336415114346020021420 0ustar rootroot ispconfig3_install/install/dist/lib/centos70.lib.php0000775000000000000000000000335515114346020021454 0ustar rootroot ispconfig3_install/install/dist/lib/fedora9.lib.php0000775000000000000000000000306315114346020021337 0ustar rootroot ispconfig3_install/install/dist/lib/fedora32.lib.php0000775000000000000000000000336415114346020021417 0ustar rootroot ispconfig3_install/install/dist/lib/fedora.lib.php0000775000000000000000000016050015273367323021265 0ustar rootrootlng(' WARNING! You are using mod_authz_compat.')); swriteln($inst->lng(' Please make sure that your apache config uses the new auth syntax:')); swriteln($inst->lng(' ')); swriteln($inst->lng(' Options None')); swriteln($inst->lng(' AllowOverride None')); swriteln($inst->lng(' Require all denied')); swriteln($inst->lng(' '."\n")); swriteln($inst->lng(' If it uses the old syntax (deny from all) ISPConfig would fail to work.')); } } public function configure_saslauthd() { global $conf; $configfile = 'tpl/fedora_saslauthd_smtpd_conf.master'; $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_saslauthd_smtpd_conf.master', $configfile); wf('/usr/lib/sasl2/smtpd.conf', $content); if(is_dir('/usr/lib64')) wf('/usr/lib64/sasl/smtpd.conf', $content); if(is_dir('/usr/lib64')) wf('/usr/lib64/sasl2/smtpd.conf', $content); } public function configure_pam() { global $conf; $pam = $conf['pam']; //* configure pam for SMTP authentication agains the ispconfig database $configfile = 'pamd_smtp'; if(is_file("$pam/smtp")) copy("$pam/smtp", "$pam/smtp~"); if(is_file("$pam/smtp~")) exec("chmod 400 $pam/smtp~"); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_ip}', $conf['mysql']['ip'], $content); wf("$pam/smtp", $content); // On some OSes smtp is world readable which allows for reading database information. Removing world readable rights should have no effect. if(is_file("$pam/smtp")) exec("chmod o= $pam/smtp"); } public function configure_courier() { global $conf; $config_dir = $conf['courier']['config_dir']; //* authmysqlrc $configfile = 'authmysqlrc'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } exec("chmod 400 $config_dir/$configfile~"); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); wf("$config_dir/$configfile", $content); exec("chmod 660 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); //* authdaemonrc $configfile = $conf['courier']['config_dir'].'/authdaemonrc'; if(is_file($configfile)){ copy($configfile, $configfile.'~'); } if(is_file($configfile.'~')){ exec('chmod 400 '.$configfile.'~'); } $content = rf($configfile); $content = str_replace('authmodulelist=', 'authmodulelist="authmysql"', $content); wf($configfile, $content); } public function configure_dovecot() { global $conf; $virtual_transport = 'dovecot'; $configure_lmtp = false; // use lmtp if installed if($configure_lmtp = (is_file('/usr/lib/dovecot/lmtp') || is_file('/usr/libexec/dovecot/lmtp'))) { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; } // check if virtual_transport must be changed if ($this->is_update) { $tmp = $this->db->queryOneRecord("SELECT * FROM ?? WHERE server_id = ?", $conf["mysql"]["database"] . ".server", $conf['server_id']); $ini_array = ini_to_array(stripslashes($tmp['config'])); // ini_array needs not to be checked, because already done in update.php -> updateDbAndIni() if(isset($ini_array['mail']['mailbox_virtual_uidgid_maps']) && $ini_array['mail']['mailbox_virtual_uidgid_maps'] == 'y') { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; $configure_lmtp = true; } } $config_dir = $conf['postfix']['config_dir']; //* Configure master.cf and add a line for deliver if(!$this->get_postfix_service('dovecot', 'unix')) { //* backup if(is_file($config_dir.'/master.cf')){ copy($config_dir.'/master.cf', $config_dir.'/master.cf~2'); } if(is_file($config_dir.'/master.cf~2')){ chmod($config_dir.'/master.cf~2', 0400); } //* Configure master.cf and add a line for deliver $content = rf($conf["postfix"]["config_dir"].'/master.cf'); $deliver_content = 'dovecot unix - n n - - pipe'."\n".' flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${user}@${nexthop}'."\n"; af($conf["postfix"]["config_dir"].'/master.cf', $deliver_content); unset($content); unset($deliver_content); } //* Reconfigure postfix to use dovecot authentication $postconf_commands = array ( 'dovecot_destination_recipient_limit = 1', 'virtual_transport = '.$virtual_transport, 'smtpd_sasl_type = dovecot', 'smtpd_sasl_path = private/auth', ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~3'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Use /etc/dovecot as config dir if exists // if(is_dir('/etc/dovecot')) $config_dir = '/etc/dovecot'; $config_dir = $conf['dovecot']['config_dir']; //* backup dovecot.conf $configfile = 'dovecot.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } //* Get the dovecot version exec('dovecot --version', $tmp); $dovecot_version = $tmp[0]; unset($tmp); //* Copy dovecot configuration file if(version_compare($dovecot_version,2) >= 0) { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_dovecot2.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_dovecot2.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/fedora_dovecot2.conf.master', $config_dir.'/'.$configfile); } if(version_compare($dovecot_version,2.1) < 0) { removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); } if(version_compare($dovecot_version,2.2) >= 0) { // Dovecot > 2.2 does not recognize !SSLv2 anymore on Debian 9 $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('!SSLv2','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } if(version_compare($dovecot_version,2.3) >= 0) { // Remove deprecated setting(s) removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); // Check if we have a dhparams file and if not, create it if(!file_exists('/etc/dovecot/dh.pem')) { swriteln('Creating new DHParams file, this takes several minutes. Do not interrupt the script.'); if(file_exists('/var/lib/dovecot/ssl-parameters.dat')) { // convert existing ssl parameters file $command = 'dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } else { /* Create a new dhparams file. We use 2048 bit only as it simply takes too long on smaller systems to generate a 4096 bit dh file (> 30 minutes). If you need a 4096 bit file, create it manually before you install ISPConfig */ $command = 'openssl dhparam -out /etc/dovecot/dh.pem 2048'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } //remove #2.3+ comment $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('#2.3+','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } else { // remove settings which are not supported in Dovecot < 2.3 removeLine($config_dir.'/'.$configfile, 'ssl_min_protocol ='); removeLine($config_dir.'/'.$configfile, 'ssl_dh ='); } replaceLine($config_dir.'/'.$configfile, 'postmaster_address = postmaster@example.com', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); replaceLine($config_dir.'/'.$configfile, 'postmaster_address = webmaster@localhost', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); } else { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_dovecot.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_dovecot.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/fedora_dovecot.conf.master', $config_dir.'/'.$configfile); } } //* dovecot-lmtpd if($configure_lmtp) { replaceLine($config_dir.'/'.$configfile, 'protocols = imap pop3', 'protocols = imap pop3 lmtp', 1, 0); } //* dovecot-sql.conf $configfile = 'dovecot-sql.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); exec("chmod 400 $config_dir/$configfile~"); } if(!@file_exists('/etc/dovecot-sql.conf')) exec('ln -s /etc/dovecot/dovecot-sql.conf /etc/dovecot-sql.conf'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_dovecot-sql.conf.master', "tpl/fedora_dovecot-sql.conf.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); # enable iterate_query for dovecot2 if(version_compare($dovecot_version,2, '>=')) { $content = str_replace('# iterate_query', 'iterate_query', $content); } wf("$config_dir/$configfile", $content); exec("chmod 600 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); // Dovecot shall ignore mounts in website directory if(is_installed('doveadm')) exec("doveadm mount add '/var/www/*' ignore > /dev/null 2> /dev/null"); } public function configure_amavis() { global $conf, $dist; // amavisd user config file $configfile = 'fedora_amavisd_conf'; if(is_file($conf["amavis"]["config_dir"].'/amavisd.conf')) copy($conf["amavis"]["config_dir"].'/amavisd.conf', $conf["amavis"]["config_dir"].'/amavisd.conf~'); if(is_file($conf["amavis"]["config_dir"].'/amavisd.conf~')) exec('chmod 400 '.$conf["amavis"]["config_dir"].'/amavisd.conf~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/".$configfile.".master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_port}', $conf["mysql"]["port"], $content); $content = str_replace('{mysql_server_ip}', $conf['mysql']['ip'], $content); $content = str_replace('{hostname}', $conf['hostname'], $content); $content = str_replace('{amavis_config_dir}', $conf['amavis']['config_dir'], $content); wf($conf["amavis"]["config_dir"].'/amavisd.conf', $content); chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(!is_file($conf['amavis']['config_dir'].'/60-dkim')) { touch($conf['amavis']['config_dir'].'/60-dkim'); chmod($conf['amavis']['config_dir'].'/60-dkim', 0640); } // for CentOS 7.2 only if($dist['confid'] == 'centos72') { chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0750); chgrp($conf['amavis']['config_dir'].'/amavisd.conf', 'amavis'); chmod($conf['amavis']['config_dir'].'/60-dkim', 0750); chgrp($conf['amavis']['config_dir'].'/60-dkim', 'amavis'); } // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'content_filter = amavis:[127.0.0.1]:10024', 'receive_override_options = no_address_mappings' ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~2'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['postfix']['config_dir']; // Adding amavis-services to the master.cf file // backup master.cf if(is_file($config_dir.'/master.cf')) copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); // first remove the old service definitions $this->remove_postfix_service('amavis','unix'); $this->remove_postfix_service('127.0.0.1:10025','inet'); $this->remove_postfix_service('127.0.0.1:10027','inet'); // then add them back $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis.master', 'tpl/master_cf_amavis.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10025.master', 'tpl/master_cf_amavis10025.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10027.master', 'tpl/master_cf_amavis10027.master'); af($config_dir.'/master.cf', $content); unset($content); removeLine('/etc/sysconfig/freshclam', 'FRESHCLAM_DELAY=disabled-warn # REMOVE ME', 1); replaceLine('/etc/freshclam.conf', 'Example', '# Example', 1); // Add the clamav user to the vscan group //exec('groupmod --add-user clamav vscan'); } public function configure_spamassassin() { global $conf; //* Enable spamasasssin on debian and ubuntu /* $configfile = '/etc/default/spamassassin'; if(is_file($configfile)){ copy($configfile, $configfile.'~'); } $content = rf($configfile); $content = str_replace('ENABLED=0', 'ENABLED=1', $content); wf($configfile, $content); */ } public function configure_getmail() { global $conf; $config_dir = $conf['getmail']['config_dir']; if(!is_dir($config_dir)) exec("mkdir -p ".escapeshellcmd($config_dir)); $command = "useradd -d $config_dir getmail"; if(!is_user('getmail')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "chown -R getmail $config_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "chmod -R 700 $config_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_pureftpd() { global $conf; $config_dir = $conf['pureftpd']['config_dir']; //* configure pam for SMTP authentication agains the ispconfig database $configfile = 'pureftpd-mysql.conf'; if(is_file("$config_dir/$configfile")){ copy("$config_dir/$configfile", "$config_dir/$configfile~"); } if(is_file("$config_dir/$configfile~")){ exec("chmod 400 $config_dir/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/pureftpd_mysql.conf.master', 'tpl/pureftpd_mysql.conf.master'); $content = str_replace('{mysql_server_ispconfig_user}', $conf["mysql"]["ispconfig_user"], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf["mysql"]["ispconfig_password"], $content); $content = str_replace('{mysql_server_database}', $conf["mysql"]["database"], $content); $content = str_replace('{mysql_server_ip}', $conf["mysql"]["ip"], $content); $content = str_replace('{server_id}', $conf["server_id"], $content); wf("$config_dir/$configfile", $content); exec("chmod 600 $config_dir/$configfile"); exec("chown root:root $config_dir/$configfile"); // copy our customized copy of pureftpd.conf to the pure-ftpd config directory $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/fedora_pureftpd_conf.master', 'tpl/fedora_pureftpd_conf.master'); //* keep the active lines of these keys from the existing pure-ftpd.conf $old_content = rf("$config_dir/pure-ftpd.conf"); foreach(array('TLS', 'CertFile', 'TLSCipherSuite', 'PassivePortRange', 'ForcePassiveIP') as $key) { if(!preg_match('/^[ \t]*' . $key . '[ \t]+\S.*$/m', $old_content, $matches)) continue; $line = trim($matches[0]); $count = 0; $content = preg_replace_callback('/^[ \t]*#?[ \t]*' . $key . '[ \t]+.*$/m', function() use ($line) { return $line; }, $content, 1, $count); if($count == 0) $content = rtrim($content) . "\n" . $line . "\n"; } wf("$config_dir/pure-ftpd.conf", $content); } public function configure_mydns() { global $conf; // configure mydns $configfile = 'mydns.conf'; if(is_file($conf["mydns"]["config_dir"].'/'.$configfile)) copy($conf["mydns"]["config_dir"].'/'.$configfile, $conf["mydns"]["config_dir"].'/'.$configfile.'~'); if(is_file($conf["mydns"]["config_dir"].'/'.$configfile.'~')) exec('chmod 400 '.$conf["mydns"]["config_dir"].'/'.$configfile.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/".$configfile.".master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf["mysql"]["host"], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf["server_id"], $content); wf($conf["mydns"]["config_dir"].'/'.$configfile, $content); exec('chmod 600 '.$conf["mydns"]["config_dir"].'/'.$configfile); exec('chown root:root '.$conf["mydns"]["config_dir"].'/'.$configfile); } public function configure_bind() { global $conf; // add the include line at the end of named.conf. replaceLine('/etc/named.conf', 'include "/etc/named.conf.local";', 'include "/etc/named.conf.local";', 0, 1); //* Check if the zonefile directory has a slash at the end $content=$conf['bind']['bind_zonefiles_dir']; if(substr($content, -1, 1) != '/') { $content .= '/'; } //* Create the slave subdirectory $content .= 'slave'; $content_mkdir = 'mkdir -p '.$content; exec($content_mkdir); //* Chown the slave subdirectory to $conf['bind']['bind_user'] exec('chown '.$conf['bind']['bind_user'].':'.$conf['bind']['bind_group'].' '.$content); exec('chmod 2770 '.$content); } public function configure_apache() { global $conf; if($conf['apache']['installed'] == false) return; if(is_file('/etc/suphp.conf')) { //replaceLine('/etc/suphp.conf','php=php:/usr/bin','x-httpd-suphp=php:/usr/bin/php-cgi',0); replaceLine('/etc/suphp.conf', 'docroot=', 'docroot=/var/www', 0); replaceLine('/etc/suphp.conf', 'umask=0077', 'umask=0022', 0); } //* Create the logging directory for the vhost logfiles exec('mkdir -p /var/log/ispconfig/httpd'); // Sites enabled and avaulable dirs exec('mkdir -p '.$conf['apache']['vhost_conf_enabled_dir']); exec('mkdir -p '.$conf['apache']['vhost_conf_dir']); $content = rf('/etc/httpd/conf/httpd.conf'); if(!stristr($content, 'Include /etc/httpd/conf/sites-enabled/')) { af('/etc/httpd/conf/httpd.conf', "\nNameVirtualHost *:80\nNameVirtualHost *:443\nInclude /etc/httpd/conf/sites-enabled/\n\n"); } unset($content); //* Copy the ISPConfig configuration include $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; $tpl = new tpl('apache_ispconfig.conf.master'); $tpl->setVar('apache_version',getapacheversion()); if($this->is_update == true) { $tpl->setVar('logging',get_logging_state()); } else { $tpl->setVar('logging','yes'); } $records = $this->db->queryAllRecords("SELECT * FROM ?? WHERE server_id = ? AND virtualhost = 'y'", $conf['mysql']['master_database'] . '.server_ip', $conf['server_id']); $ip_addresses = array(); if(is_array($records) && count($records) > 0) { foreach($records as $rec) { if($rec['ip_type'] == 'IPv6') { $ip_address = '['.$rec['ip_address'].']'; } else { $ip_address = $rec['ip_address']; } $ports = explode(',', $rec['virtualhost_port']); if(is_array($ports)) { foreach($ports as $port) { $port = intval($port); if($port > 0 && $port < 65536 && $ip_address != '') { $ip_addresses[] = array('ip_address' => $ip_address, 'port' => $port); } } } } } if(count($ip_addresses) > 0) $tpl->setLoop('ip_adresses',$ip_addresses); wf($vhost_conf_dir.'/ispconfig.conf', $tpl->grab()); unset($tpl); if(!@is_link($vhost_conf_enabled_dir."/000-ispconfig.conf")) { exec("ln -s ".$vhost_conf_dir."/ispconfig.conf ".$vhost_conf_enabled_dir."/000-ispconfig.conf"); } //* make sure that webalizer finds its config file when it is directly in /etc if(@is_file('/etc/webalizer.conf') && !@is_dir('/etc/webalizer')) { exec('mkdir /etc/webalizer'); exec('ln -s /etc/webalizer.conf /etc/webalizer/webalizer.conf'); } if(is_file('/etc/webalizer/webalizer.conf')) { // Change webalizer mode to incremental replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental yes', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName webalizer.hist', 0, 0); } //* add a sshusers group $command = 'groupadd sshusers'; if(!is_group('sshusers')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_nginx(){ global $conf; if($conf['nginx']['installed'] == false) return; //* Create the logging directory for the vhost logfiles if(!@is_dir($conf['ispconfig_log_dir'].'/httpd')) mkdir($conf['ispconfig_log_dir'].'/httpd', 0755, true); // Sites enabled and avaulable dirs exec('mkdir -p '.$conf['nginx']['vhost_conf_enabled_dir']); exec('mkdir -p '.$conf['nginx']['vhost_conf_dir']); wf('/etc/nginx/conf.d/ispconfig_vhosts.conf', "include /etc/nginx/sites-enabled/*.vhost;"); //* make sure that webalizer finds its config file when it is directly in /etc if(@is_file('/etc/webalizer.conf') && !@is_dir('/etc/webalizer')) { mkdir('/etc/webalizer'); symlink('/etc/webalizer.conf', '/etc/webalizer/webalizer.conf'); } if(is_file('/etc/webalizer/webalizer.conf')) { // Change webalizer mode to incremental replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental yes', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName webalizer.hist', 0, 0); } // Check the awsatst script if(!is_dir('/usr/share/awstats/tools')) exec('mkdir -p /usr/share/awstats/tools'); if(!file_exists('/usr/share/awstats/tools/awstats_buildstaticpages.pl') && file_exists('/usr/share/doc/awstats/examples/awstats_buildstaticpages.pl')) symlink('/usr/share/doc/awstats/examples/awstats_buildstaticpages.pl', '/usr/share/awstats/tools/awstats_buildstaticpages.pl'); if(file_exists('/etc/awstats/awstats.conf.local')) replaceLine('/etc/awstats/awstats.conf.local', 'LogFormat=4', 'LogFormat=1', 0, 1); //* add a sshusers group $command = 'groupadd sshusers'; if(!is_group('sshusers')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); // add anonymized log option to nginxx.conf file $nginx_conf_file = $conf['nginx']['config_dir'].'/nginx.conf'; if(is_file($nginx_conf_file)) { $tmp = file_get_contents($nginx_conf_file); if(!stristr($tmp, 'log_format anonymized')) { copy($nginx_conf_file,$nginx_conf_file.'~'); replaceLine($nginx_conf_file, 'http {', "http {\n\n".file_get_contents('tpl/nginx_anonlog.master'), 0, 0); } } } public function configure_bastille_firewall() { global $conf; $dist_init_scripts = $conf['init_scripts']; if(is_dir("/etc/Bastille.backup")) caselog("rm -rf /etc/Bastille.backup", __FILE__, __LINE__); if(is_dir("/etc/Bastille")) caselog("mv -f /etc/Bastille /etc/Bastille.backup", __FILE__, __LINE__); @mkdir("/etc/Bastille", octdec($directory_mode)); if(is_dir("/etc/Bastille.backup/firewall.d")) caselog("cp -pfr /etc/Bastille.backup/firewall.d /etc/Bastille/", __FILE__, __LINE__); if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/bastille-firewall.cfg.master')) { caselog("cp -f " . $conf['ispconfig_install_dir']."/server/conf-custom/install/bastille-firewall.cfg.master /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); } else { caselog("cp -f tpl/bastille-firewall.cfg.master /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); } caselog("chmod 644 /etc/Bastille/bastille-firewall.cfg", __FILE__, __LINE__); $content = rf("/etc/Bastille/bastille-firewall.cfg"); $content = str_replace("{DNS_SERVERS}", "", $content); $tcp_public_services = ''; $udp_public_services = ''; $row = $this->db->queryOneRecord('SELECT * FROM ?? WHERE server_id = ?', $conf["mysql"]["database"] . '.firewall', $conf['server_id']); if($row && (trim($row["tcp_port"] ?? '') != '' || trim($row["udp_port"] ?? '') != '')){ $tcp_public_services = trim(str_replace(',', ' ', $row["tcp_port"])); $udp_public_services = trim(str_replace(',', ' ', $row["udp_port"])); } else { $tcp_public_services = '21 22 25 53 80 110 443 3306 8080 10000'; $udp_public_services = '53'; } if(!stristr($tcp_public_services, $conf['apache']['vhost_port'])) { $tcp_public_services .= ' '.intval($conf['apache']['vhost_port']); if($row && ($row["tcp_port"] ?? '') != '') $this->db->query("UPDATE firewall SET tcp_port = tcp_port + ? WHERE server_id = ?", ',' . intval($conf['apache']['vhost_port']), $conf['server_id']); } $content = str_replace("{TCP_PUBLIC_SERVICES}", $tcp_public_services, $content); $content = str_replace("{UDP_PUBLIC_SERVICES}", $udp_public_services, $content); wf("/etc/Bastille/bastille-firewall.cfg", $content); if(is_file($dist_init_scripts."/bastille-firewall")) caselog("mv -f $dist_init_scripts/bastille-firewall $dist_init_scripts/bastille-firewall.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-firewall $dist_init_scripts", __FILE__, __LINE__); caselog("chmod 700 $dist_init_scripts/bastille-firewall", __FILE__, __LINE__); if(is_file("/sbin/bastille-ipchains")) caselog("mv -f /sbin/bastille-ipchains /sbin/bastille-ipchains.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-ipchains /sbin", __FILE__, __LINE__); caselog("chmod 700 /sbin/bastille-ipchains", __FILE__, __LINE__); if(is_file("/sbin/bastille-netfilter")) caselog("mv -f /sbin/bastille-netfilter /sbin/bastille-netfilter.backup", __FILE__, __LINE__); caselog("cp -f apps/bastille-netfilter /sbin", __FILE__, __LINE__); caselog("chmod 700 /sbin/bastille-netfilter", __FILE__, __LINE__); if(!@is_dir('/var/lock/subsys')) caselog("mkdir /var/lock/subsys", __FILE__, __LINE__); exec("which iptables > /dev/null 2>&1", $iptables_location, $ret_val); if(!is_file("/sbin/iptables") && !is_link("/sbin/iptables") && $ret_val == 0) phpcaselog(@symlink(trim(shell_exec("which iptables")), "/sbin/iptables"), 'create symlink', __FILE__, __LINE__); unset($iptables_location); } public function install_ispconfig() { global $conf; $install_dir = $conf['ispconfig_install_dir']; //* Create the ISPConfig installation directory if(!@is_dir("$install_dir")) { $command = "mkdir $install_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Create a ISPConfig user and group $command = 'groupadd ispconfig'; if(!is_group('ispconfig')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "useradd -g ispconfig -d $install_dir ispconfig"; if(!is_user('ispconfig')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig interface part $command = "cp -rf ../interface $install_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig server part $command = "cp -rf ../server $install_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make a backup of the security settings if(is_file('/usr/local/ispconfig/security/security_settings.ini')) copy('/usr/local/ispconfig/security/security_settings.ini','/usr/local/ispconfig/security/security_settings.ini~'); //* copy the ISPConfig security part $command = 'cp -rf ../security '.$install_dir; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $configfile = 'security_settings.ini'; if(is_file($install_dir.'/security/'.$configfile)) { copy($install_dir.'/security/'.$configfile, $install_dir.'/security/'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); wf($install_dir.'/security/'.$configfile, $content); $this->keep_security_settings($install_dir); //* Create a symlink, so ISPConfig is accessible via web // Replaced by a separate vhost definition for port 8080 // $command = "ln -s $install_dir/interface/web/ /var/www/ispconfig"; // caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Create the config file for ISPConfig interface $configfile = 'config.inc.php'; if(is_file($install_dir.'/interface/lib/'.$configfile)){ copy("$install_dir/interface/lib/$configfile", "$install_dir/interface/lib/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{mysql_master_server_client_flags}', (isset($conf['mysql']['master_client_flags']) ? intval($conf['mysql']['master_client_flags']) : 0), $content); $content = str_replace('{mysql_server_client_flags}', (isset($conf['mysql']['client_flags']) ? intval($conf['mysql']['client_flags']) : 0), $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf("$install_dir/interface/lib/$configfile", $content); //* Create the config file for ISPConfig server $configfile = 'config.inc.php'; if(is_file($install_dir.'/server/lib/'.$configfile)){ copy("$install_dir/server/lib/$configfile", "$install_dir/server/lib/$configfile~"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', "tpl/$configfile.master"); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{mysql_master_server_client_flags}', (isset($conf['mysql']['master_client_flags']) ? intval($conf['mysql']['master_client_flags']) : 0), $content); $content = str_replace('{mysql_server_client_flags}', (isset($conf['mysql']['client_flags']) ? intval($conf['mysql']['client_flags']) : 0), $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf("$install_dir/server/lib/$configfile", $content); //* Create the config file for remote-actions (but only, if it does not exist, because // the value is a autoinc-value and so changed by the remoteaction_core_module if (!file_exists($install_dir.'/server/lib/remote_action.inc.php')) { $content = ''; wf($install_dir.'/server/lib/remote_action.inc.php', $content); } //* Enable the server modules and plugins. // TODO: Implement a selector which modules and plugins shall be enabled. $dir = $install_dir.'/server/mods-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/mods-available/'.$file; $module_name = substr($file, 0, -8); $tmp = new $module_name; if($tmp->onInstall()) { if(!@is_link($install_dir.'/server/mods-enabled/'.$file)) @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-enabled/'.$file); if (strpos($file, '_core_module') !== false) { if(!@is_link($install_dir.'/server/mods-core/'.$file)) @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-core/'.$file); } } unset($tmp); } } closedir($dh); } } $dir = $install_dir.'/server/plugins-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($conf['apache']['installed'] == true && $file == 'nginx_plugin.inc.php') continue; if($conf['nginx']['installed'] == true && $file == 'apache2_plugin.inc.php') continue; if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/plugins-available/'.$file; $plugin_name = substr($file, 0, -8); $tmp = new $plugin_name; if($tmp->onInstall()) { if(!@is_link($install_dir.'/server/plugins-enabled/'.$file)) @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-enabled/'.$file); if (strpos($file, '_core_plugin') !== false) { if(!@is_link($install_dir.'/server/plugins-core/'.$file)) @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-core/'.$file); } } unset($tmp); } } closedir($dh); } } // Update the server config $mail_server_enabled = ($conf['services']['mail'])?1:0; $web_server_enabled = ($conf['services']['web'])?1:0; $dns_server_enabled = ($conf['services']['dns'])?1:0; $file_server_enabled = ($conf['services']['file'])?1:0; $db_server_enabled = ($conf['services']['db'])?1:0; $vserver_server_enabled = ($conf['services']['vserver'])?1:0; $sql = "UPDATE `server` SET mail_server = ?, web_server = ?, dns_server = ?, file_server = ?, db_server = ?, vserver_server = ? WHERE server_id = ?"; $this->db->query($sql, $mail_server_enabled, $web_server_enabled, $dns_server_enabled, $file_server_enabled, $db_server_enabled, $vserver_server_enabled, $conf['server_id']); if($conf['mysql']['master_slave_setup'] == 'y') { $this->dbmaster->query($sql, $mail_server_enabled, $web_server_enabled, $dns_server_enabled, $file_server_enabled, $db_server_enabled, $vserver_server_enabled, $conf['server_id']); } // chown install dir to root and chmod 755 $command = 'chown root:root '.$install_dir; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chmod 755 '.$install_dir; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Chmod the files and directories in the install dir $command = 'chmod -R 750 '.$install_dir.'/*'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the interface files to the ispconfig user and group $command = 'chown -R ispconfig:ispconfig '.$install_dir.'/interface'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the extensions directory to the ispconfig user and group $command = 'chown ispconfig:ispconfig '.$install_dir.'/extensions'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the server files to the root user and group $command = 'chown -R root:root '.$install_dir.'/server'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security files to the root user and group $command = 'chown -R root:root '.$install_dir.'/security'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security directory and security_settings.ini to root:ispconfig $command = 'chown root:ispconfig '.$install_dir.'/security/security_settings.ini'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.whitelist'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.htmlfield'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/apache_directives.blacklist'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/nginx_directives.blacklist'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make the global language file directory group writable exec("chmod -R 770 $install_dir/interface/lib/lang"); //* Make the temp directory for language file exports writable exec("chmod -R 770 $install_dir/interface/web/temp"); //* Make all interface language file directories group writable $handle = @opendir($install_dir.'/interface/web'); while ($file = @readdir($handle)) { if ($file != '.' && $file != '..') { if(@is_dir($install_dir.'/interface/web'.'/'.$file.'/lib/lang')) { $handle2 = opendir($install_dir.'/interface/web'.'/'.$file.'/lib/lang'); chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang', 0770); while ($lang_file = @readdir($handle2)) { if ($lang_file != '.' && $lang_file != '..') { chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang/'.$lang_file, 0770); } } } } } //* Make the APS directories group writable exec("chmod -R 770 $install_dir/interface/web/sites/aps_meta_packages"); exec("chmod -R 770 $install_dir/server/aps_packages"); //* make sure that the server config file (not the interface one) is only readable by the root user chmod($install_dir.'/server/lib/config.inc.php', 0600); chown($install_dir.'/server/lib/config.inc.php', 'root'); chgrp($install_dir.'/server/lib/config.inc.php', 'root'); //* Make sure thet the interface config file is readable by user ispconfig only chmod($install_dir.'/interface/lib/config.inc.php', 0600); chown($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); chgrp($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); if(@is_file("$install_dir/server/lib/mysql_clientdb.conf")) { exec("chmod 600 $install_dir/server/lib/mysql_clientdb.conf"); exec("chown root:root $install_dir/server/lib/mysql_clientdb.conf"); } if(@is_file("$install_dir/server/lib/postgresql_clientdb.conf")) { exec("chmod 600 $install_dir/server/lib/postgresql_clientdb.conf"); exec("chown root:root $install_dir/server/lib/postgresql_clientdb.conf"); } if(is_dir($install_dir.'/interface/invoices')) { exec('chmod -R 770 '.escapeshellarg($install_dir.'/interface/invoices')); exec('chown -R ispconfig:ispconfig '.escapeshellarg($install_dir.'/interface/invoices')); } exec('chown -R root:root /usr/local/ispconfig/interface/ssl'); // TODO: FIXME: add the www-data user to the ispconfig group. This is just for testing // and must be fixed as this will allow the apache user to read the ispconfig files. // Later this must run as own apache server or via suexec! if($conf['apache']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['apache']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['apache']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } if($conf['nginx']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['nginx']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['nginx']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } //* Make the shell scripts executable $command = "chmod +x $install_dir/server/scripts/*.sh"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if ($this->install_ispconfig_interface == true && isset($conf['interface_password']) && $conf['interface_password']!='admin') { $sql = "UPDATE sys_user SET passwort = ? WHERE username = 'admin';"; $this->db->query($sql, $this->crypt_password($conf['interface_password'])); } if($conf['apache']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel // TODO: These are missing! should they be "vhost_dist_*_dir" ? $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $tpl = new tpl('apache_ispconfig.vhost.master'); $tpl->setVar('vhost_port',$conf['apache']['vhost_port']); // comment out the listen directive if port is 80 or 443 if($conf['apache']['vhost_port'] == 80 or $conf['apache']['vhost_port'] == 443) { $tpl->setVar('vhost_port_listen','#'); } else { $tpl->setVar('vhost_port_listen',''); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $tpl->setVar('ssl_comment',''); } else { $tpl->setVar('ssl_comment','#'); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key') && is_file($install_dir.'/interface/ssl/ispserver.bundle')) { $tpl->setVar('ssl_bundle_comment',''); } else { $tpl->setVar('ssl_bundle_comment','#'); } $tpl->setVar('apache_version',getapacheversion()); wf($vhost_conf_dir.'/ispconfig.vhost', $tpl->grab()); //copy('tpl/apache_ispconfig.vhost.master', "$vhost_conf_dir/ispconfig.vhost"); //* and create the symlink //if($this->is_update == false) { if(@is_link("$vhost_conf_enabled_dir/ispconfig.vhost")) unlink("$vhost_conf_enabled_dir/ispconfig.vhost"); if(!@is_link("$vhost_conf_enabled_dir/000-ispconfig.vhost")) { exec("ln -s $vhost_conf_dir/ispconfig.vhost $vhost_conf_enabled_dir/000-ispconfig.vhost"); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apache_ispconfig_fcgi_starter.master', 'tpl/apache_ispconfig_fcgi_starter.master'); $content = str_replace('{fastcgi_bin}', $conf['fastcgi']['fastcgi_bin'], $content); $content = str_replace('{fastcgi_phpini_path}', $conf['fastcgi']['fastcgi_phpini_path'], $content); if(!is_dir('/var/www/php-fcgi-scripts/ispconfig')) exec('mkdir -p /var/www/php-fcgi-scripts/ispconfig'); $this->set_immutable('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', false); wf('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', $content); exec('chmod +x /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter'); if(!is_link('/var/www/ispconfig')) exec('ln -s /usr/local/ispconfig/interface/web /var/www/ispconfig'); exec('chown -R ispconfig:ispconfig /var/www/php-fcgi-scripts/ispconfig'); $this->set_immutable('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', true); //} //} } if($conf['nginx']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel $vhost_conf_dir = $conf['nginx']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['nginx']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/nginx_ispconfig.vhost.master', 'tpl/nginx_ispconfig.vhost.master'); $content = str_replace('{vhost_port}', $conf['nginx']['vhost_port'], $content); if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $content = str_replace('{ssl_on}', 'ssl', $content); $content = str_replace('{ssl_comment}', '', $content); $content = str_replace('{fastcgi_ssl}', 'on', $content); } else { $content = str_replace('{ssl_on}', '', $content); $content = str_replace('{ssl_comment}', '#', $content); $content = str_replace('{fastcgi_ssl}', 'off', $content); } $socket_dir = escapeshellcmd($conf['nginx']['php_fpm_socket_dir']); if(substr($socket_dir, -1) != '/') $socket_dir .= '/'; if(!is_dir($socket_dir)) exec('mkdir -p '.$socket_dir); $fpm_socket = $socket_dir.'ispconfig.sock'; //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); wf($vhost_conf_dir.'/ispconfig.vhost', $content); unset($content); // PHP-FPM // Dont just copy over the php-fpm pool template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/php_fpm_pool.conf.master', 'tpl/php_fpm_pool.conf.master'); $content = str_replace('{fpm_pool}', 'ispconfig', $content); //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); $content = str_replace('{fpm_user}', 'ispconfig', $content); $content = str_replace('{fpm_group}', 'ispconfig', $content); wf($conf['nginx']['php_fpm_pool_dir'].'/ispconfig.conf', $content); //copy('tpl/nginx_ispconfig.vhost.master', $vhost_conf_dir.'/ispconfig.vhost'); //* and create the symlink if($this->is_update == false) { if(@is_link($vhost_conf_enabled_dir.'/ispconfig.vhost')) unlink($vhost_conf_enabled_dir.'/ispconfig.vhost'); if(!@is_link($vhost_conf_enabled_dir.'/000-ispconfig.vhost')) { symlink($vhost_conf_dir.'/ispconfig.vhost', $vhost_conf_enabled_dir.'/000-ispconfig.vhost'); } } // create symlink from /usr/share/phpmyadmin to /usr/share/phpMyAdmin, if it is installed if(!@file_exists('/usr/share/phpmyadmin') && @is_dir('/usr/share/phpMyAdmin')) symlink('/usr/share/phpMyAdmin/', '/usr/share/phpmyadmin'); } // Make the Clamav log files readable by ISPConfig //exec('chmod +r /var/log/clamav/clamav.log'); //exec('chmod +r /var/log/clamav/freshclam.log'); //* Install the update script if(is_file('/usr/local/bin/ispconfig_update_from_dev.sh')) unlink('/usr/local/bin/ispconfig_update_from_dev.sh'); exec('chown root /usr/local/ispconfig/server/scripts/update_from_dev.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/update_from_dev.sh'); exec('chown root /usr/local/ispconfig/server/scripts/update_stable.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/update_stable.sh'); exec('chown root /usr/local/ispconfig/server/scripts/ispconfig_update.sh'); exec('chmod 700 /usr/local/ispconfig/server/scripts/ispconfig_update.sh'); if(!is_link('/usr/local/bin/ispconfig_update_from_dev.sh')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_update.sh /usr/local/bin/ispconfig_update_from_dev.sh'); if(!is_link('/usr/local/bin/ispconfig_update.sh')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_update.sh /usr/local/bin/ispconfig_update.sh'); // Install ISPConfig cli command if(is_file('/usr/local/bin/ispc')) unlink('/usr/local/bin/ispc'); chown($install_dir.'/server/cli/ispc', 'root'); chmod($install_dir.'/server/cli/ispc', 0700); symlink($install_dir.'/server/cli/ispc', '/usr/local/bin/ispc'); // set the fast cgi starter script to executable // exec('chmod 755 '.$install_dir.'/interface/bin/php-fcgi'); //To enable apache to read the directories // exec('chmod a+rx /usr/local/ispconfig'); // exec('chmod -R 751 /usr/local/ispconfig/interface'); // exec('chmod a+rx /usr/local/ispconfig/interface/web'); //* Create the ispconfig log directory if(!is_dir($conf['ispconfig_log_dir'])) mkdir($conf['ispconfig_log_dir']); if(!is_file($conf['ispconfig_log_dir'].'/ispconfig.log')) exec('touch '.$conf['ispconfig_log_dir'].'/ispconfig.log'); chmod($conf['ispconfig_log_dir'].'/ispconfig.log', 0600); if(is_dir('/var/log/ispconfig')) exec('chmod o-rw /var/log/ispconfig/*.gz /var/log/ispconfig/*.log 2>/dev/null'); if(is_user('getmail')) { exec('mv /usr/local/ispconfig/server/scripts/run-getmail.sh /usr/local/bin/run-getmail.sh'); exec('chown getmail /usr/local/bin/run-getmail.sh'); exec('chmod 744 /usr/local/bin/run-getmail.sh'); } // Edit the file Edit the file /etc/sudoers and comment out the requiregetty line, otherwise the backup function will fail replaceLine('/etc/sudoers', 'Defaults requiretty', '#Defaults requiretty', 0, 0); if(is_dir($install_dir.'/interface/invoices')) { exec('chmod -R 770 '.escapeshellarg($install_dir.'/interface/invoices')); exec('chown -R ispconfig:ispconfig '.escapeshellarg($install_dir.'/interface/invoices')); } //* Create the ispconfig auth log file and set uid/gid if(!is_file($conf['ispconfig_log_dir'].'/auth.log')) { touch($conf['ispconfig_log_dir'].'/auth.log'); } exec('chown ispconfig:ispconfig '. $conf['ispconfig_log_dir'].'/auth.log'); exec('chmod 660 '. $conf['ispconfig_log_dir'].'/auth.log'); //* Remove Domain module as its functions are available in the client module now if(@is_dir('/usr/local/ispconfig/interface/web/domain')) exec('rm -rf /usr/local/ispconfig/interface/web/domain'); // Add symlink for patch tool if(!is_link('/usr/local/bin/ispconfig_patch')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_patch /usr/local/bin/ispconfig_patch'); // Change mode of a few files from amavisd if(is_file($conf['amavis']['config_dir'].'/conf.d/50-user')) chmod($conf['amavis']['config_dir'].'/conf.d/50-user', 0640); if(is_file($conf['amavis']['config_dir'].'/50-user~')) chmod($conf['amavis']['config_dir'].'/50-user~', 0400); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf')) chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf~')) chmod($conf['amavis']['config_dir'].'/amavisd.conf~', 0400); } } ?> ispconfig3_install/install/dist/lib/opensuse110.lib.php0000775000000000000000000000306315114346020022071 0ustar rootroot ispconfig3_install/install/dist/lib/centos_base.lib.php0000775000000000000000000001424215273367323022313 0ustar rootrootclamav_socket, $content); $content = str_replace('{amavis_config_dir}', $conf['amavis']['config_dir'], $content); wf($conf["amavis"]["config_dir"].'/amavisd.conf', $content); chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(!is_file($conf['amavis']['config_dir'].'/60-dkim')) { touch($conf['amavis']['config_dir'].'/60-dkim'); chmod($conf['amavis']['config_dir'].'/60-dkim', 0640); } // for CentOS 7.2 only if($dist['confid'] == 'centos72') { chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0750); chgrp($conf['amavis']['config_dir'].'/amavisd.conf', 'amavis'); chmod($conf['amavis']['config_dir'].'/60-dkim', 0750); chgrp($conf['amavis']['config_dir'].'/60-dkim', 'amavis'); } // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'content_filter = amavis:[127.0.0.1]:10024', 'receive_override_options = no_address_mappings' ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~2'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['postfix']['config_dir']; // Adding amavis-services to the master.cf file // backup master.cf if(is_file($config_dir.'/master.cf')) copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); // first remove the old service definitions $this->remove_postfix_service('amavis','unix'); $this->remove_postfix_service('127.0.0.1:10025','inet'); $this->remove_postfix_service('127.0.0.1:10027','inet'); // then add them back $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis.master', 'tpl/master_cf_amavis.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10025.master', 'tpl/master_cf_amavis10025.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10027.master', 'tpl/master_cf_amavis10027.master'); af($config_dir.'/master.cf', $content); unset($content); removeLine('/etc/sysconfig/freshclam', 'FRESHCLAM_DELAY=disabled-warn # REMOVE ME', 1); replaceLine('/etc/freshclam.conf', 'Example', '# Example', 1); // get shell-group for amavis $amavis_group=exec('grep -o "^amavis:\|^vscan:" /etc/group'); if(!empty($amavis_group)) { $amavis_group=rtrim($amavis_group, ":"); } // get shell-user for amavis $amavis_user=exec('grep -o "^amavis:\|^vscan:" /etc/passwd'); if(!empty($amavis_user)) { $amavis_user=rtrim($amavis_user, ":"); } // Create the director for DKIM-Keys if(!is_dir('/var/lib/amavis')) mkdir('/var/lib/amavis', 0750, true); if(!empty($amavis_user)) exec('chown '.$amavis_user.' /var/lib/amavis'); if(!empty($amavis_group)) exec('chgrp '.$amavis_group.' /var/lib/amavis'); if(!is_dir('/var/lib/amavis/dkim')) mkdir('/var/lib/amavis/dkim', 0750); if(!empty($amavis_user)) exec('chown -R '.$amavis_user.' /var/lib/amavis/dkim'); if(!empty($amavis_group)) exec('chgrp -R '.$amavis_group.' /var/lib/amavis/dkim'); } } ?> ispconfig3_install/install/dist/lib/debian40.lib.php0000775000000000000000000000306315114346020021374 0ustar rootroot ispconfig3_install/install/dist/lib/centos90.lib.php0000775000000000000000000000336415114346020021456 0ustar rootroot ispconfig3_install/install/dist/lib/gentoo.lib.php0000775000000000000000000023446615273367323021335 0ustar rootrootget_template_file($conf['jailkit']['jk_init'], true); //* get contents $this->write_config_file($conf['jailkit']['config_dir'] . '/' . $conf['jailkit']['jk_init'], $jkinit_content); $jkchroot_content = $this->get_template_file($conf['jailkit']['jk_chrootsh'], true); //* get contents $this->write_config_file($conf['jailkit']['config_dir'] . '/' . $conf['jailkit']['jk_chrootsh'], $jkchroot_content); } $command = 'chown root:root /var/www'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_postfix($options = '') { global $conf,$autoinstall; $cf = $conf['postfix']; $config_dir = $cf['config_dir']; if(!is_dir($config_dir)){ $this->error("The postfix configuration directory '$config_dir' does not exist."); } //* Get postfix version exec('postconf -d mail_version 2>&1', $out); $postfix_version = preg_replace('/.*=\s*/', '', $out[0]); unset($out); //* Install virtual mappings foreach (glob('tpl/mysql-virtual_*.master') as $filename) { $this->process_postfix_config( basename($filename, '.master') ); } //* mysql-verify_recipients.cf $this->process_postfix_config('mysql-verify_recipients.cf'); // test if lmtp if available $configure_lmtp = $this->get_postfix_service('lmtp','unix'); //* postfix-dkim $filename='tag_as_originating.re'; $full_file_name=$config_dir.'/'.$filename; if(is_file($full_file_name)) copy($full_file_name, $full_file_name.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/postfix-'.$filename.'.master', 'tpl/postfix-'.$filename.'.master'); if($configure_lmtp) { $content = preg_replace('/amavis:/', 'lmtp:', $content); } wf($full_file_name, $content); $filename='tag_as_foreign.re'; $full_file_name=$config_dir.'/'.$filename; if(is_file($full_file_name)) copy($full_file_name, $full_file_name.'~'); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/postfix-'.$filename.'.master', 'tpl/postfix-'.$filename.'.master'); if($configure_lmtp) { $content = preg_replace('/amavis:/', 'lmtp:', $content); } wf($full_file_name, $content); //* Changing mode and group of the new created config files. /*caselog('chmod o= '.$config_dir.'/mysql-virtual_*.cf* > /dev/null 2>&1', __FILE__, __LINE__, 'chmod on mysql-virtual_*.cf*', 'chmod on mysql-virtual_*.cf* failed'); caselog('chgrp '.$cf['group'].' '.$config_dir.'/mysql-virtual_*.cf* > /dev/null 2>&1', __FILE__, __LINE__, 'chgrp on mysql-virtual_*.cf*', 'chgrp on mysql-virtual_*.cf* failed');*/ //* Creating virtual mail user and group $command = 'groupadd -g '.$cf['vmail_groupid'].' '.$cf['vmail_groupname']; if(!is_group($cf['vmail_groupname'])) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'useradd -g '.$cf['vmail_groupname'].' -u '.$cf['vmail_userid'].' '.$cf['vmail_username'].' -d '.$cf['vmail_mailbox_base'].' -m'; if(!is_user($cf['vmail_username'])) caselog("$command > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* These postconf commands will be executed on installation and update $server_ini_rec = $this->db->queryOneRecord("SELECT config FROM ?? WHERE server_id = ?", $conf["mysql"]["database"].'.server', $conf['server_id']); $server_ini_array = ini_to_array(stripslashes($server_ini_rec['config'])); unset($server_ini_rec); //* If there are RBL's defined, format the list and add them to smtp_recipient_restrictions to prevent removal after an update $rbl_list = ''; if (@isset($server_ini_array['mail']['realtime_blackhole_list']) && $server_ini_array['mail']['realtime_blackhole_list'] != '') { $rbl_hosts = explode(",", str_replace(" ", "", $server_ini_array['mail']['realtime_blackhole_list'])); foreach ($rbl_hosts as $key => $value) { $rbl_list .= ", reject_rbl_client ". $value; } } unset($rbl_hosts); //* If Postgrey is installed, configure it $greylisting = ''; if($conf['postgrey']['installed'] == true) { $greylisting = ', check_recipient_access mysql:/etc/postfix/mysql-virtual_policy_greylist.cf'; } $reject_sender_login_mismatch = ''; $reject_authenticated_sender_login_mismatch = ''; if(isset($server_ini_array['mail']['reject_sender_login_mismatch']) && ($server_ini_array['mail']['reject_sender_login_mismatch'] == 'y')) { $reject_sender_login_mismatch = ', reject_sender_login_mismatch,'; $reject_authenticated_sender_login_mismatch = 'reject_authenticated_sender_login_mismatch, '; } # placeholder includes comment char $stress_adaptive_placeholder = '#{stress_adaptive} '; $stress_adaptive = (isset($server_ini_array['mail']['stress_adaptive']) && ($server_ini_array['mail']['stress_adaptive'] == 'y')) ? '' : $stress_adaptive_placeholder; $reject_unknown_client_hostname=''; if (isset($server_ini_array['mail']['reject_unknown']) && ($server_ini_array['mail']['reject_unknown'] == 'client' || $server_ini_array['mail']['reject_unknown'] == 'client_helo')) { $reject_unknown_client_hostname=', reject_unknown_client_hostname'; } $reject_unknown_helo_hostname=''; if ((!isset($server_ini_array['mail']['reject_unknown'])) || $server_ini_array['mail']['reject_unknown'] == 'helo' || $server_ini_array['mail']['reject_unknown'] == 'client_helo') { $reject_unknown_helo_hostname=', reject_unknown_helo_hostname'; } unset($server_ini_array); $myhostname = str_replace('.','\.',$conf['hostname']); $postconf_placeholders = array('{config_dir}' => $config_dir, '{vmail_mailbox_base}' => $cf['vmail_mailbox_base'], '{vmail_userid}' => $cf['vmail_userid'], '{vmail_groupid}' => $cf['vmail_groupid'], '{rbl_list}' => $rbl_list, '{greylisting}' => $greylisting, '{reject_slm}' => $reject_sender_login_mismatch, '{reject_aslm}' => $reject_authenticated_sender_login_mismatch, '{myhostname}' => $myhostname, $stress_adaptive_placeholder => $stress_adaptive, '{reject_unknown_client_hostname}' => $reject_unknown_client_hostname, '{reject_unknown_helo_hostname}' => $reject_unknown_helo_hostname, ); $postconf_tpl = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_postfix.conf.master', 'tpl/gentoo_postfix.conf.master'); $postconf_tpl = strtr($postconf_tpl, $postconf_placeholders); $postconf_commands = array_filter(explode("\n", $postconf_tpl)); // read and remove empty lines //* Merge version-specific postfix config if(version_compare($postfix_version , '2.5', '>=')) { $configfile = 'postfix_2-5.conf'; $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); $postconf_commands = array_merge($postconf_commands, array_filter(explode("\n", $content))); } if(version_compare($postfix_version , '2.10', '>=')) { $configfile = 'postfix_2-10.conf'; $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); $postconf_commands = array_merge($postconf_commands, array_filter(explode("\n", $content))); } if(version_compare($postfix_version , '3.0', '>=')) { $configfile = 'postfix_3-0.conf'; $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); $postconf_commands = array_merge($postconf_commands, array_filter(explode("\n", $content))); } if(version_compare($postfix_version , '3.3', '>=')) { $configfile = 'postfix_3-3.conf'; $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); $postconf_commands = array_merge($postconf_commands, array_filter(explode("\n", $content))); } $configfile = 'postfix_custom.conf'; if(file_exists($conf['ispconfig_install_dir'].'/server/conf-custom/install/' . $configfile . '.master')) { $content = file_get_contents($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); $postconf_commands = array_merge($postconf_commands, array_filter(explode("\n", $content))); } // Remove comment lines, these would give fatal errors when passed to postconf. $postconf_commands = array_filter($postconf_commands, function($line) { return preg_match('/^[^#]/', $line); }); //* These postconf commands will be executed on installation only if($this->is_update == false) { $postconf_commands = array_merge($postconf_commands, array( 'myhostname = '.$conf['hostname'], 'mydestination = '.$conf['hostname'].', localhost, localhost.localdomain', 'mynetworks = 127.0.0.0/8 [::1]/128' )); } //* Create the header and body check files touch($config_dir.'/header_checks'); touch($config_dir.'/mime_header_checks'); touch($config_dir.'/nested_header_checks'); touch($config_dir.'/body_checks'); touch($config_dir.'/sasl_passwd'); //* The relay host password map and its indexed copies are readable by root only foreach(glob($config_dir.'/sasl_passwd*') as $f) if(!is_link($f)) chmod($f, 0600); //* Create the mailman files if(!is_dir('/var/lib/mailman/data')) exec('mkdir -p /var/lib/mailman/data'); if(!is_file('/var/lib/mailman/data/aliases')) touch('/var/lib/mailman/data/aliases'); exec('postalias /var/lib/mailman/data/aliases'); if(!is_file('/var/lib/mailman/data/virtual-mailman')) touch('/var/lib/mailman/data/virtual-mailman'); exec('postmap /var/lib/mailman/data/virtual-mailman'); if(!is_file('/var/lib/mailman/data/transport-mailman')) touch('/var/lib/mailman/data/transport-mailman'); exec('/usr/sbin/postmap /var/lib/mailman/data/transport-mailman'); //* Create auxillary postfix conf files $configfile = 'helo_access'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); chmod($config_dir.'/'.$configfile.'~', 0400); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); # todo: look up this server's ip addrs and loop through each # todo: look up domains hosted on this server and loop through each wf($config_dir.'/'.$configfile, $content); $configfile = 'blacklist_helo'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); chmod($config_dir.'/'.$configfile.'~', 0400); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = strtr($content, $postconf_placeholders); wf($config_dir.'/'.$configfile, $content); //* Make a backup copy of the main.cf file copy($config_dir.'/main.cf', $config_dir.'/main.cf~'); //* Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; swriteln($command); caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); } if (!stristr($options, 'dont-create-certs')){ //* Create the SSL certificate if(AUTOINSTALL){ $command = 'cd '.$config_dir.'; ' ."openssl req -new -subj '/C=".escapeshellcmd($autoinstall['ssl_cert_country'])."/ST=".escapeshellcmd($autoinstall['ssl_cert_state'])."/L=".escapeshellcmd($autoinstall['ssl_cert_locality'])."/O=".escapeshellcmd($autoinstall['ssl_cert_organisation'])."/OU=".escapeshellcmd($autoinstall['ssl_cert_organisation_unit'])."/CN=".escapeshellcmd($autoinstall['ssl_cert_common_name'])."' -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509"; } else { $command = 'cd '.$config_dir.'; ' .'openssl req -new -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509'; } exec($command); $command = 'chmod o= '.$config_dir.'/smtpd.key'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); } //** We have to change the permissions of the courier authdaemon directory to make it accessible for maildrop. $command = 'chmod 755 /var/run/courier/authdaemon/'; if(is_file('/var/run/courier/authdaemon/')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command); //* Check maildrop service in posfix master.cf $quoted_regex = '^maildrop unix.*pipe flags=DRhu user=vmail '.preg_quote('argv=/usr/bin/maildrop -d '.$cf['vmail_username'].' ${extension} ${recipient} ${user} ${nexthop} ${sender}', '/'); $configfile = $config_dir.'/master.cf'; if($this->get_postfix_service('maildrop', 'unix')) { exec ("postconf -M maildrop.unix 2> /dev/null", $out, $ret); $change_maildrop_flags = @(preg_match("/$quoted_regex/", $out[0]) && $out[0] !='')?false:true; } else { $change_maildrop_flags = @(preg_match("/$quoted_regex/", $configfile))?false:true; } if ($change_maildrop_flags) { //* Change maildrop service in posfix master.cf if(is_file($config_dir.'/master.cf')) { copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); } if(is_file($config_dir.'/master.cf~')) { chmod($config_dir.'/master.cf~', 0400); } $configfile = $config_dir.'/master.cf'; $content = rf($configfile); $content = str_replace('flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}', 'flags=DRhu user='.$cf['vmail_username'].' argv=/usr/bin/maildrop -d '.$cf['vmail_username'].' ${extension} ${recipient} ${user} ${nexthop} ${sender}', $content); wf($configfile, $content); } //* Writing the Maildrop mailfilter file $configfile = 'mailfilter'; if(is_file($cf['vmail_mailbox_base'].'/.'.$configfile)) { copy($cf['vmail_mailbox_base'].'/.'.$configfile, $cf['vmail_mailbox_base'].'/.'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = str_replace('{dist_postfix_vmail_mailbox_base}', $cf['vmail_mailbox_base'], $content); wf($cf['vmail_mailbox_base'].'/.'.$configfile, $content); //* Create the directory for the custom mailfilters if(!is_dir($cf['vmail_mailbox_base'].'/mailfilters')) { $command = 'mkdir '.$cf['vmail_mailbox_base'].'/mailfilters'; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Chmod and chown the .mailfilter file $command = 'chown '.$cf['vmail_username'].':'.$cf['vmail_groupname'].' '.$cf['vmail_mailbox_base'].'/.mailfilter'; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chmod 600 '.$cf['vmail_mailbox_base'].'/.mailfilter'; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_saslauthd() { global $conf; $content = $this->get_template_file('sasl_smtpd.conf', true, true); //* get contents & insert db cred $this->write_config_file($conf['saslauthd']['config_dir'].'/smtpd.conf', $content); //* Edit the file saslauthd config file $content = rf($conf['saslauthd']['config_file']); $content = preg_replace('/(?<=\n)SASLAUTHD_OPTS="\$\{SASLAUTHD_OPTS\}[^"]+"/', 'SASLAUTHD_OPTS="${SASLAUTHD_OPTS} -a pam -r -c -s 128 -t 30 -n 5"', $content); $this->write_config_file($conf['saslauthd']['config_file'], $content); } public function configure_courier() { global $conf; //* authmysqlrc $content = $this->get_template_file('authmysqlrc', true, true); //* get contents & insert db cred $this->write_config_file($conf['courier']['config_dir'].'/authmysqlrc', $content); //* authdaemonrc $configfile = $conf['courier']['config_dir'].'/authdaemonrc'; $content = rf($configfile); $content = preg_replace('/(?<=\n)authmodulelist="[^"]+"/', "authmodulelist=\"authmysql\"", $content); $this->write_config_file($configfile, $content); //* create certificates $command = 'mkimapdcert'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'mkpop3dcert'; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_dovecot() { global $conf; $virtual_transport = 'dovecot'; $configure_lmtp = false; // use lmtp if installed if($configure_lmtp = (is_file('/usr/lib/dovecot/lmtp') || is_file('/usr/libexec/dovecot/lmtp'))) { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; } // check if virtual_transport must be changed if ($this->is_update) { $tmp = $this->db->queryOneRecord("SELECT * FROM ?? WHERE server_id = ?", $conf["mysql"]["database"] . ".server", $conf['server_id']); $ini_array = ini_to_array(stripslashes($tmp['config'])); // ini_array needs not to be checked, because already done in update.php -> updateDbAndIni() if(isset($ini_array['mail']['mailbox_virtual_uidgid_maps']) && $ini_array['mail']['mailbox_virtual_uidgid_maps'] == 'y') { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; $configure_lmtp = true; } } $config_dir = $conf['postfix']['config_dir']; $quoted_config_dir = preg_quote($config_dir, '|'); $postfix_version = shell_exec("postconf -d mail_version 2>/dev/null"); $postfix_version = preg_replace( '/mail_version\s*=\s*(.*)\s*/', '$1', $postfix_version ); //* Configure master.cf and add a line for deliver if(!$this->get_postfix_service('dovecot', 'unix')) { //* backup if(is_file($config_dir.'/master.cf')){ copy($config_dir.'/master.cf', $config_dir.'/master.cf~2'); } if(is_file($config_dir.'/master.cf~2')){ chmod($config_dir.'/master.cf~2', 0400); } //* Configure master.cf and add a line for deliver $content = rf($config_dir.'/master.cf'); $deliver_content = 'dovecot unix - n n - - pipe'."\n".' flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop}'."\n"; af($config_dir.'/master.cf', $deliver_content); unset($content); unset($deliver_content); } //* Reconfigure postfix to use dovecot authentication // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'dovecot_destination_recipient_limit = 1', 'virtual_transport = '.$virtual_transport, 'smtpd_sasl_type = dovecot', 'smtpd_sasl_path = private/auth' ); // Make a backup copy of the main.cf file copy($config_dir.'/main.cf', $config_dir.'/main.cf~3'); $options = preg_split("/,\s*/", exec("postconf -h smtpd_recipient_restrictions")); $new_options = array(); foreach ($options as $value) { $value = trim($value); if ($value == '') continue; if (preg_match("|check_recipient_access\s+proxy:mysql:{$quoted_config_dir}/mysql-verify_recipients.cf|", $value)) { continue; } $new_options[] = $value; } if ($configure_lmtp && (!isset($conf['mail']['content_filter']) || $conf['mail']['content_filter'] === 'amavisd')) { for ($i = 0; isset($new_options[$i]); $i++) { if ($new_options[$i] == 'reject_unlisted_recipient') { array_splice($new_options, $i+1, 0, array("check_recipient_access proxy:mysql:{$config_dir}/mysql-verify_recipients.cf")); break; } } # postfix < 3.3 needs this when using reject_unverified_recipient: if(version_compare($postfix_version, 3.3, '<')) { $postconf_commands[] = "enable_original_recipient = yes"; } } $postconf_commands[] = "smtpd_recipient_restrictions = ".implode(", ", $new_options); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* backup dovecot.conf $config_dir = $conf['dovecot']['config_dir']; $configfile = 'dovecot.conf'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); } //* Get the dovecot version exec('dovecot --version', $tmp); $dovecot_version = $tmp[0]; unset($tmp); //* Copy dovecot configuration file if(version_compare($dovecot_version,1, '<=')) { //* Dovecot 1.x if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_dovecot.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_dovecot.conf.master', $config_dir.'/'.$configfile); } else { copy('dist/tpl/gentoo/dovecot.conf.master', $config_dir.'/'.$configfile); } } else { //* Dovecot 2.x if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_dovecot2.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_dovecot2.conf.master', $config_dir.'/'.$configfile); } else { copy('dist/tpl/gentoo/dovecot2.conf.master', $config_dir.'/'.$configfile); } // Copy custom config file if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master')) { if(!@is_dir($config_dir . '/conf.d')) { mkdir($config_dir . '/conf.d'); } copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master', $config_dir.'/conf.d/99-ispconfig-custom-config.conf'); } replaceLine($config_dir.'/'.$configfile, 'postmaster_address = postmaster@example.com', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); replaceLine($config_dir.'/'.$configfile, 'postmaster_address = webmaster@localhost', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); if(version_compare($dovecot_version, 2.1, '<')) { removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); } if(version_compare($dovecot_version,2.2) >= 0) { // Dovecot > 2.2 does not recognize !SSLv2 anymore on Debian 9 $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('!SSLv2','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } if(version_compare($dovecot_version,2.3) >= 0) { // Remove deprecated setting(s) removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); // Check if we have a dhparams file and if not, create it if(!file_exists('/etc/dovecot/dh.pem')) { // Create symlink to ISPConfig dhparam file swriteln('Creating symlink /etc/dovecot/dh.pem to ISPConfig DHParam file.'); symlink('/usr/local/ispconfig/interface/ssl/dhparam4096.pem', '/etc/dovecot/dh.pem'); /* swriteln('Creating new DHParams file, this takes several minutes. Do not interrupt the script.'); if(file_exists('/var/lib/dovecot/ssl-parameters.dat')) { // convert existing ssl parameters file $command = 'dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } else { //Create a new dhparams file. We use 2048 bit only as it simply takes too long //on smaller systems to generate a 4096 bit dh file (> 30 minutes). If you need // a 4096 bit file, create it manually before you install ISPConfig $command = 'openssl dhparam -out /etc/dovecot/dh.pem 2048'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } */ } //remove #2.3+ comment $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('#2.3+ ','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } else { // remove settings which are not supported in Dovecot < 2.3 removeLine($config_dir.'/'.$configfile, 'ssl_min_protocol ='); removeLine($config_dir.'/'.$configfile, 'ssl_dh ='); } } $dovecot_protocols = 'imap pop3'; //* dovecot-lmtpd if($configure_lmtp) { $dovecot_protocols .= ' lmtp'; } //* dovecot-managesieved if(is_file('/usr/lib/dovecot/managesieve') || is_file('/usr/libexec/dovecot/managesieve')) { $dovecot_protocols .= ' sieve'; } replaceLine($config_dir.'/'.$configfile, 'protocols = imap pop3', "protocols = $dovecot_protocols", 1, 0); //* dovecot-sql.conf $configfile = 'dovecot-sql.conf'; if(is_file($config_dir.'/'.$configfile)) { copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); } if(is_file($config_dir.'/'.$configfile.'~')) chmod($config_dir.'/'.$configfile.'~', 0400); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian_dovecot-sql.conf.master', 'tpl/debian_dovecot-sql.conf.master'); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); # enable iterate_query for dovecot2 if(version_compare($dovecot_version,2, '>=')) { $content = str_replace('# iterate_query', 'iterate_query', $content); } wf($config_dir.'/'.$configfile, $content); chmod($config_dir.'/'.$configfile, 0600); chown($config_dir.'/'.$configfile, 'root'); chgrp($config_dir.'/'.$configfile, 'root'); // Dovecot shall ignore mounts in website directory if(is_installed('doveadm')) exec("doveadm mount add '/var/www/*' ignore > /dev/null 2> /dev/null"); } public function configure_spamassassin() { return true; } public function configure_getmail() { global $conf; $config_dir = $conf['getmail']['config_dir']; if (!is_dir($config_dir)) { exec('mkdir -p '.escapeshellcmd($config_dir)); } $command = "useradd -d $config_dir ".$conf['getmail']['user']; if (!is_user('getmail')) { caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $command = "chown -R getmail $config_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = "chmod -R 700 $config_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Getmail will be run from cron. In order to have access to cron the getmail user needs to be part of the cron group. $command = "gpasswd -a getmail " . $conf['cron']['group']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function configure_amavis() { global $conf; //* Amavisd-new user config file $conf_file = 'amavisd-ispconfig.conf'; $conf_path = dirname($conf['amavis']['config_file']) . '/' . $conf_file; $content = $this->get_template_file($conf_file, true, true); //* get contents & insert db cred $this->write_config_file($conf_path, $content); //* Activate config directory in default file $amavis_conf = rf($conf['amavis']['config_file']); if (stripos($amavis_conf, $conf_path) === false) { $amavis_conf = preg_replace('/^(1;.*)$/m', "include_config_files('$conf_path');\n$1", $amavis_conf); $this->write_config_file($conf['amavis']['config_file'], $amavis_conf); } //* Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'content_filter = amavis:[127.0.0.1]:10024', 'receive_override_options = no_address_mappings' ); foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['postfix']['config_dir']; // Adding amavis-services to the master.cf file // backup master.cf if(is_file($config_dir.'/master.cf')) copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); // first remove the old service definitions $this->remove_postfix_service('amavis','unix'); $this->remove_postfix_service('127.0.0.1:10025','inet'); $this->remove_postfix_service('127.0.0.1:10027','inet'); // then add them back $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis.master', 'tpl/master_cf_amavis.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10025.master', 'tpl/master_cf_amavis10025.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10027.master', 'tpl/master_cf_amavis10027.master'); af($config_dir.'/master.cf', $content); unset($content); //* Add the clamav user to the amavis group exec('usermod -a -G amavis clamav'); } public function configure_pureftpd() { global $conf; //* configure pure-ftpd for MySQL authentication against the ispconfig database $content = $this->get_template_file('pureftpd_mysql.conf', true, true); //* get contents & insert db cred $content = str_replace('{server_id}', $conf['server_id'], $content); $this->write_config_file($conf['pureftpd']['mysql_config_file'], $content, 600, 'root', 'root'); //* enable pure-ftpd and server settings $content = rf($conf["pureftpd"]["config_file"]); $content = preg_replace('/#?IS_CONFIGURED="(?:yes|no)"/', 'IS_CONFIGURED="yes"', $content); $content = str_replace('AUTH="-l unix"', 'AUTH="-l mysql:'.$conf['pureftpd']['mysql_config_file'].'"', $content); //* Logging defaults to syslog's ftp facility. Override this behaviour for better compatibility with debian/ubuntu //* and specify the format. $logdir = '/var/log/pure-ftpd'; if (!is_dir($logdir)) { mkdir($logdir, 0755, true); } /** * @link http://download.pureftpd.org/pub/pure-ftpd/doc/README * -b brokenclientscompatibility * -A chrooteveryone * -E noanonymous * -O altlog : * -Z customerproof (Add safe guards against common customer mistakes ie. like chmod 0 on their own files) * -D displaydotfiles * -H dontresolve */ //* Enable TLS if certificate file exists $enable_tls = ''; if(file_exists('/etc/ssl/private/pure-ftpd.pem')) { $enable_tls = ' -Y 1'; } $content = preg_replace('/MISC_OTHER="[^"]+"/', 'MISC_OTHER="-b -A -E -Z -D -H -O clf:'.$logdir.'/transfer.log'.$enable_tls.'"', $content); $this->write_config_file($conf['pureftpd']['config_file'], $content); //* Since version 1.0.50: Configuration through /etc/conf.d/pure-ftpd is now deprecated! exec("/usr/sbin/pure-ftpd --help | head -1",$out); if(preg_match("#v([0-9\.]+)\s#",$out[0],$matches)){ $pureftpd_version = $matches[1]; if(version_compare($pureftpd_version, '1.0.50', '>=')) { $configfile = $conf['pureftpd']['main_config_file']; if(is_file($configfile)) { copy($configfile, $configfile.'~'); } $content = rf($configfile); $content = preg_replace('/BrokenClientsCompatibility\s+(yes|no)/', 'BrokenClientsCompatibility yes', $content); $content = preg_replace('/ChrootEveryone\s+(yes|no)/', 'ChrootEveryone yes', $content); $content = preg_replace('/NoAnonymous\s+(yes|no)/', 'NoAnonymous yes', $content); $content = preg_replace('/#? AltLog\s+clf.*\s/', 'AltLog clf:/var/log/pureftpd.log', $content); $content = preg_replace('/CustomerProof\s+(yes|no)/', 'CustomerProof yes', $content); $content = preg_replace('/DisplayDotFiles\s+(yes|no)/', 'DisplayDotFiles yes', $content); $content = preg_replace('/DontResolve\s+(yes|no)/', 'DontResolve yes', $content); $content = preg_replace('/#? MySQLConfigFile\s+\/.*\s/', 'MySQLConfigFile ' . $conf['pureftpd']['mysql_config_file'], $content); if(file_exists('/etc/ssl/private/pure-ftpd.pem')) { $content = preg_replace('/(#?) TLS\s+(0|1)/', 'TLS 1', $content); } wf($configfile, $content); } } } public function configure_powerdns() { global $conf; //* Create the database and the grant with the MySQL admin account (on update $this->db uses the ISPConfig account) $admin_db = new db(); if(!$admin_db->query('CREATE DATABASE IF NOT EXISTS ?? DEFAULT CHARACTER SET ?', $conf['powerdns']['database'], $conf['mysql']['charset'])) { $this->error('Unable to create MySQL database: '.$conf['powerdns']['database'].'.'); } //* Create the ISPConfig database user in the local database $query = 'GRANT ALL ON ??.* TO ?@?'; if(!$admin_db->query($query, $conf['powerdns']['database'], $conf['mysql']['ispconfig_user'], 'localhost')) { $this->error('Unable to create user for powerdns database Error: '.$admin_db->errorMessage); } //* load the powerdns databse dump caselog("mysql ".mysql_admin_option()." --default-character-set=".escapeshellarg($conf['mysql']['charset'])." --force ".escapeshellarg($conf['powerdns']['database'])." < '".ISPC_INSTALL_ROOT."/install/sql/powerdns.sql' > /dev/null 2>&1", __FILE__, __LINE__, 'read in ispconfig3.sql', 'could not read in powerdns.sql'); //* Create the powerdns config file $content = $this->get_template_file('pdns.local', true, true); //* get contents & insert db cred $content = str_replace('{powerdns_database}', $conf['powerdns']['database'], $content); $this->write_config_file($conf["powerdns"]["config_dir"].'/'.$conf["powerdns"]["config_file"], $content, 600, 'root', 'root'); //* Create symlink to init script to start the correct config file if( !is_link($conf['init_scripts'].'/'.$conf['powerdns']['init_script']) ) { symlink($conf['init_scripts'].'/pdns', $conf['init_scripts'].'/'.$conf['powerdns']['init_script']); } } public function configure_bind() { global $conf; //* Check if the zonefile directory has a slash at the end $content=$conf['bind']['bind_zonefiles_dir']; if(substr($content, -1, 1) != '/') { $content .= '/'; } //* New default format of named.conf uses views. Check which version the system is using and include our zones file. $named_conf = rf($conf['bind']['named_conf_path']); if (stripos($named_conf, 'include "'.$conf['bind']['named_conf_local_path'].'";') === false) { preg_match_all("/(?<=\n)view \"(?:public|internal)\" in \{.*\n\};/Us", $named_conf, $views); if (count($views[0]) == 2) { foreach ($views[0] as $view) { $named_conf = str_replace($view, substr($view, 0, -2)."include \"{$conf['bind']['named_conf_local_path']}\";\n};", $named_conf); } wf($conf['bind']['named_conf_path'], $named_conf); } else { af($conf['bind']['named_conf_path'], 'include "'.$conf['bind']['named_conf_local_path'].'";'); } } } public function configure_apache() { global $conf; if($conf['apache']['installed'] == false) return; //* Create the logging directory for the vhost logfiles if (!is_dir($conf['ispconfig_log_dir'].'/httpd')) { mkdir($conf['ispconfig_log_dir'].'/httpd', 0755, true); } if (is_file($conf['suphp']['config_file'])) { $content = rf($conf['suphp']['config_file']); if (!preg_match('|^x-httpd-suphp=php:/usr/bin/php-cgi$|m', $content)) { $content = preg_replace('/;Handler for php-scripts/', ";Handler for php-scripts\nx-httpd-suphp=php:/usr/bin/php-cgi", $content); $content = preg_replace('/;?umask=\d+/', 'umask=0022', $content); } $this->write_config_file($conf['suphp']['config_file'], $content); } //* Enable ISPConfig default vhost settings $default_vhost_path = $conf['apache']['vhost_conf_dir'].'/'.$conf['apache']['vhost_default']; if (is_file($default_vhost_path)) { $content = rf($default_vhost_path); $content = preg_replace('/^#?\s*NameVirtualHost.*$/m', 'NameVirtualHost *:80', $content); $content = preg_replace('/]+>/', '', $content); $this->write_config_file($default_vhost_path, $content); } //* Generate default ssl certificates if (!is_dir($conf['apache']['ssl_dir'])) { mkdir($conf['apache']['ssl_dir']); } if ($conf['services']['mail'] == true) { copy($conf['postfix']['config_dir']."/smtpd.key", $conf['apache']['ssl_dir']."/server.key"); copy($conf['postfix']['config_dir']."/smtpd.cert", $conf['apache']['ssl_dir']."/server.crt"); } else { if (!is_file($conf['apache']['ssl_dir'] . '/server.crt')) { exec("openssl req -new -outform PEM -out {$conf['apache']['ssl_dir']}/server.crt -newkey rsa:2048 -nodes -keyout {$conf['apache']['ssl_dir']}/server.key -keyform PEM -days 365 -x509"); } } //* Copy the ISPConfig configuration include $tpl = new tpl('apache_ispconfig.conf.master'); $tpl->setVar('apache_version',getapacheversion()); if($this->is_update == true) { $tpl->setVar('logging',get_logging_state()); } else { $tpl->setVar('logging','yes'); } $records = $this->db->queryAllRecords("SELECT * FROM ?? WHERE server_id = ? AND virtualhost = 'y'", $conf['mysql']['master_database'] . '.server_ip', $conf['server_id']); $ip_addresses = array(); if(is_array($records) && count($records) > 0) { foreach($records as $rec) { if($rec['ip_type'] == 'IPv6') { $ip_address = '['.$rec['ip_address'].']'; } else { $ip_address = $rec['ip_address']; } $ports = explode(',', $rec['virtualhost_port']); if(is_array($ports)) { foreach($ports as $port) { $port = intval($port); if($port > 0 && $port < 65536 && $ip_address != '') { $ip_addresses[] = array('ip_address' => $ip_address, 'port' => $port); } } } } } if(count($ip_addresses) > 0) $tpl->setLoop('ip_adresses',$ip_addresses); wf($conf['apache']['vhost_conf_dir'].'/000-ispconfig.conf', $tpl->grab()); unset($tpl); //* Gentoo by default does not include .vhost files. Add include line to config file. $content = rf($conf['apache']['config_file']); if ( strpos($content, 'Include /etc/apache2/vhosts.d/*.vhost') === false ) { $content = preg_replace('|(Include /etc/apache2/vhosts.d/\*.conf)|', "$1\nInclude /etc/apache2/vhosts.d/*.vhost", $content); } $this->write_config_file($conf['apache']['config_file'], $content); //* make sure that webalizer finds its config file when it is directly in /etc if(is_file('/etc/webalizer.conf') && !is_dir('/etc/webalizer')) { mkdir('/etc/webalizer', 0755); symlink('/etc/webalizer.conf', '/etc/webalizer/webalizer.conf'); } if(is_file('/etc/webalizer/webalizer.conf')) //* Change webalizer mode to incremental { replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental yes', 0, 0); replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName webalizer.hist', 0, 0); } //* add a sshusers group if (!is_group('sshusers')) { $command = 'groupadd sshusers'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } public function configure_apps_vhost() { global $conf; //* Create the ispconfig apps vhost user and group if($conf['apache']['installed'] == true){ $apps_vhost_user = escapeshellcmd($conf['web']['apps_vhost_user']); $apps_vhost_group = escapeshellcmd($conf['web']['apps_vhost_group']); $install_dir = escapeshellcmd($conf['web']['website_basedir'].'/apps'); $command = 'groupadd '.$apps_vhost_user; if ( !is_group($apps_vhost_group) ) { caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $command = "useradd -g '$apps_vhost_group' -d $install_dir $apps_vhost_group"; if ( !is_user($apps_vhost_user) ) { caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //$command = 'adduser '.$conf['apache']['user'].' '.$apps_vhost_group; $command = 'usermod -a -G '.$apps_vhost_group.' '.$conf['apache']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(!@is_dir($install_dir)){ mkdir($install_dir, 0755, true); } else { chmod($install_dir, 0755); } chown($install_dir, $apps_vhost_user); chgrp($install_dir, $apps_vhost_group); //* Copy the apps vhost file $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; $apps_vhost_servername = ($conf['web']['apps_vhost_servername'] == '') ? '' : 'ServerName '.$conf['web']['apps_vhost_servername']; //* Dont just copy over the virtualhost template but add some custom settings $content = $this->get_template_file('apache_apps.vhost', true); $content = str_replace('{apps_vhost_ip}', $conf['web']['apps_vhost_ip'], $content); $content = str_replace('{apps_vhost_port}', $conf['web']['apps_vhost_port'], $content); $content = str_replace('{apps_vhost_dir}', $conf['web']['website_basedir'].'/apps', $content); $content = str_replace('{website_basedir}', $conf['web']['website_basedir'], $content); $content = str_replace('{apps_vhost_servername}', $apps_vhost_servername, $content); //* comment out the listen directive if port is 80 or 443 if($conf['web']['apps_vhost_ip'] == 80 or $conf['web']['apps_vhost_ip'] == 443) { $content = str_replace('{vhost_port_listen}', '#', $content); } else { $content = str_replace('{vhost_port_listen}', '', $content); } $this->write_config_file("$vhost_conf_dir/apps.vhost", $content); //if ( !is_file($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter') ) //{ $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apache_apps_fcgi_starter.master', 'tpl/apache_apps_fcgi_starter.master'); $content = str_replace('{fastcgi_bin}', $conf['fastcgi']['fastcgi_bin'], $content); $content = str_replace('{fastcgi_phpini_path}', $conf['fastcgi']['fastcgi_phpini_path'], $content); mkdir($conf['web']['website_basedir'].'/php-fcgi-scripts/apps', 0755, true); //copy('tpl/apache_apps_fcgi_starter.master',$conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter'); $this->set_immutable($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter', false); wf($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter', $content); exec('chmod +x '.$conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter'); exec('chown -R ispapps:ispapps '.$conf['web']['website_basedir'].'/php-fcgi-scripts/apps'); $this->set_immutable($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter', true); //} } if($conf['nginx']['installed'] == true){ $apps_vhost_user = escapeshellcmd($conf['web']['apps_vhost_user']); $apps_vhost_group = escapeshellcmd($conf['web']['apps_vhost_group']); $install_dir = escapeshellcmd($conf['web']['website_basedir'].'/apps'); $command = 'groupadd '.$apps_vhost_user; if(!is_group($apps_vhost_group)) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'useradd -g '.$apps_vhost_group.' -d '.$install_dir.' '.$apps_vhost_group; if(!is_user($apps_vhost_user)) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //$command = 'adduser '.$conf['nginx']['user'].' '.$apps_vhost_group; $command = 'usermod -a -G '.$apps_vhost_group.' '.$conf['nginx']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(!@is_dir($install_dir)){ mkdir($install_dir, 0755, true); } else { chmod($install_dir, 0755); } chown($install_dir, $apps_vhost_user); chgrp($install_dir, $apps_vhost_group); //* Copy the apps vhost file $vhost_conf_dir = $conf['nginx']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['nginx']['vhost_conf_enabled_dir']; $apps_vhost_servername = ($conf['web']['apps_vhost_servername'] == '')?'_':$conf['web']['apps_vhost_servername']; // Dont just copy over the virtualhost template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/nginx_apps.vhost.master', 'tpl/nginx_apps.vhost.master'); if($conf['web']['apps_vhost_ip'] == '_default_'){ $apps_vhost_ip = ''; } else { //* an IPv6 address in brackets $apps_vhost_ip = (strpos($conf['web']['apps_vhost_ip'], ':') !== false ? '['.trim($conf['web']['apps_vhost_ip'], '[]').']' : $conf['web']['apps_vhost_ip']).':'; //* a single address gets no listener on all IPv6 addresses if($conf['web']['apps_vhost_ip'] != '*') $content = preg_replace('/^\s*listen \[::\]:\{apps_vhost_port\}.*\n/m', '', $content); } $socket_dir = escapeshellcmd($conf['nginx']['php_fpm_socket_dir']); if(substr($socket_dir, -1) != '/') $socket_dir .= '/'; if(!is_dir($socket_dir)) exec('mkdir -p '.$socket_dir); $fpm_socket = $socket_dir.'apps.sock'; $cgi_socket = escapeshellcmd($conf['nginx']['cgi_socket']); $content = str_replace('{apps_vhost_ip}', $apps_vhost_ip, $content); $content = str_replace('{apps_vhost_port}', $conf['web']['apps_vhost_port'], $content); $content = str_replace('{apps_vhost_dir}', $conf['web']['website_basedir'].'/apps', $content); $content = str_replace('{apps_vhost_servername}', $apps_vhost_servername, $content); //$content = str_replace('{fpm_port}', ($conf['nginx']['php_fpm_start_port']+1), $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); $content = str_replace('{cgi_socket}', $cgi_socket, $content); // SSL in apps vhost is off by default. Might change later. $content = str_replace('{ssl_on}', 'ssl', $content); $content = str_replace('{ssl_comment}', '#', $content); wf($vhost_conf_dir.'/apps.vhost', $content); // PHP-FPM // Dont just copy over the php-fpm pool template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apps_php_fpm_pool.conf.master', 'tpl/apps_php_fpm_pool.conf.master'); $content = str_replace('{fpm_pool}', 'apps', $content); //$content = str_replace('{fpm_port}', ($conf['nginx']['php_fpm_start_port']+1), $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); $content = str_replace('{fpm_user}', $apps_vhost_user, $content); $content = str_replace('{fpm_group}', $apps_vhost_group, $content); wf($conf['nginx']['php_fpm_pool_dir'].'/apps.conf', $content); //copy('tpl/nginx_ispconfig.vhost.master', "$vhost_conf_dir/ispconfig.vhost"); //* and create the symlink if(@is_link($vhost_conf_enabled_dir.'/apps.vhost')) unlink($vhost_conf_enabled_dir.'/apps.vhost'); if(!@is_link($vhost_conf_enabled_dir.'/000-apps.vhost')) { symlink($vhost_conf_dir.'/apps.vhost', $vhost_conf_enabled_dir.'/000-apps.vhost'); } } } public function get_host_ips() { $out = array(); exec("ip addr show | awk '/global/ { print $2 }' | cut -d '/' -f 1", $ret, $val); if($val == 0) { if(is_array($ret) && !empty($ret)){ foreach($ret as $ip) { $ip = trim($ip); $out[] = $ip; } } } return $out; } public function install_ispconfig() { global $conf; $install_dir = $conf['ispconfig_install_dir']; //* Create the ISPConfig installation directory if(!@is_dir($install_dir)) { $command = "mkdir $install_dir"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* Create a ISPConfig user and group $command = 'groupadd ispconfig'; if(!is_group('ispconfig')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'useradd -g ispconfig -d '.$install_dir.' ispconfig'; if(!is_user('ispconfig')) caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig interface part $command = 'cp -rf ../interface '.$install_dir; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* copy the ISPConfig server part $command = 'cp -rf ../server '.$install_dir; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make a backup of the security settings if(is_file('/usr/local/ispconfig/security/security_settings.ini')) copy('/usr/local/ispconfig/security/security_settings.ini','/usr/local/ispconfig/security/security_settings.ini~'); //* copy the ISPConfig security part $command = 'cp -rf ../security '.$install_dir; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $configfile = 'security_settings.ini'; if(is_file($install_dir.'/security/'.$configfile)) { copy($install_dir.'/security/'.$configfile, $install_dir.'/security/'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); wf($install_dir.'/security/'.$configfile, $content); $this->keep_security_settings($install_dir); //* Create a symlink, so ISPConfig is accessible via web // Replaced by a separate vhost definition for port 8080 // $command = "ln -s $install_dir/interface/web/ /var/www/ispconfig"; // caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Create the config file for ISPConfig interface $configfile = 'config.inc.php'; if(is_file($install_dir.'/interface/lib/'.$configfile)) { copy($install_dir.'/interface/lib/'.$configfile, $install_dir.'/interface/lib/'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{mysql_master_server_client_flags}', (isset($conf['mysql']['master_client_flags']) ? intval($conf['mysql']['master_client_flags']) : 0), $content); $content = str_replace('{mysql_server_client_flags}', (isset($conf['mysql']['client_flags']) ? intval($conf['mysql']['client_flags']) : 0), $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf($install_dir.'/interface/lib/'.$configfile, $content); //* Create the config file for ISPConfig server $configfile = 'config.inc.php'; if(is_file($install_dir.'/server/lib/'.$configfile)) { copy($install_dir.'/server/lib/'.$configfile, $install_dir.'/server/lib/'.$configfile.'~'); } $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/'.$configfile.'.master', 'tpl/'.$configfile.'.master'); $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content); $content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content); $content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content); $content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content); $content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content); $content = str_replace('{mysql_master_server_client_flags}', (isset($conf['mysql']['master_client_flags']) ? intval($conf['mysql']['master_client_flags']) : 0), $content); $content = str_replace('{mysql_server_client_flags}', (isset($conf['mysql']['client_flags']) ? intval($conf['mysql']['client_flags']) : 0), $content); $content = str_replace('{server_id}', $conf['server_id'], $content); $content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content); $content = str_replace('{language}', $conf['language'], $content); $content = str_replace('{timezone}', $conf['timezone'], $content); $content = str_replace('{theme}', $conf['theme'], $content); $content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content); wf($install_dir.'/server/lib/'.$configfile, $content); //* Create the config file for remote-actions (but only, if it does not exist, because // the value is a autoinc-value and so changed by the remoteaction_core_module if (!file_exists($install_dir.'/server/lib/remote_action.inc.php')) { $content = ''; wf($install_dir.'/server/lib/remote_action.inc.php', $content); } //* Enable the server modules and plugins. // TODO: Implement a selector which modules and plugins shall be enabled. $dir = $install_dir.'/server/mods-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/mods-available/'.$file; $module_name = substr($file, 0, -8); $tmp = new $module_name; if($tmp->onInstall()) { if(!@is_link($install_dir.'/server/mods-enabled/'.$file)) { @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-enabled/'.$file); // @symlink($install_dir.'/server/mods-available/'.$file, '../mods-enabled/'.$file); } if (strpos($file, '_core_module') !== false) { if(!@is_link($install_dir.'/server/mods-core/'.$file)) { @symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-core/'.$file); // @symlink($install_dir.'/server/mods-available/'.$file, '../mods-core/'.$file); } } } unset($tmp); } } closedir($dh); } } $dir = $install_dir.'/server/plugins-available/'; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if($conf['apache']['installed'] == true && $file == 'nginx_plugin.inc.php') continue; if($conf['nginx']['installed'] == true && $file == 'apache2_plugin.inc.php') continue; if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') { include_once $install_dir.'/server/plugins-available/'.$file; $plugin_name = substr($file, 0, -8); $tmp = new $plugin_name; if(method_exists($tmp, 'onInstall') && $tmp->onInstall()) { if(!@is_link($install_dir.'/server/plugins-enabled/'.$file)) { @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-enabled/'.$file); //@symlink($install_dir.'/server/plugins-available/'.$file, '../plugins-enabled/'.$file); } if (strpos($file, '_core_plugin') !== false) { if(!@is_link($install_dir.'/server/plugins-core/'.$file)) { @symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-core/'.$file); //@symlink($install_dir.'/server/plugins-available/'.$file, '../plugins-core/'.$file); } } } unset($tmp); } } closedir($dh); } } // Update the server config $mail_server_enabled = ($conf['services']['mail'])?1:0; $web_server_enabled = ($conf['services']['web'])?1:0; $dns_server_enabled = ($conf['services']['dns'])?1:0; $file_server_enabled = ($conf['services']['file'])?1:0; $db_server_enabled = ($conf['services']['db'])?1:0; $vserver_server_enabled = ($conf['openvz']['installed'])?1:0; $proxy_server_enabled = ($conf['services']['proxy'])?1:0; $firewall_server_enabled = ($conf['services']['firewall'])?1:0; $xmpp_server_enabled = ($conf['services']['xmpp'])?1:0; $sql = "UPDATE `server` SET mail_server = '$mail_server_enabled', web_server = '$web_server_enabled', dns_server = '$dns_server_enabled', file_server = '$file_server_enabled', db_server = '$db_server_enabled', vserver_server = '$vserver_server_enabled', proxy_server = '$proxy_server_enabled', firewall_server = '$firewall_server_enabled', xmpp_server = '$xmpp_server_enabled' WHERE server_id = ?"; $this->db->query($sql, $conf['server_id']); if($conf['mysql']['master_slave_setup'] == 'y') { $this->dbmaster->query($sql, $conf['server_id']); } // chown install dir to root and chmod 755 $command = 'chown root:root '.$install_dir; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chmod 755 '.$install_dir; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Chmod the files and directories in the install dir $command = 'chmod -R 750 '.$install_dir.'/*'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the interface files to the ispconfig user and group $command = 'chown -R ispconfig:ispconfig '.$install_dir.'/interface'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the extensions directory to the ispconfig user and group $command = 'chown ispconfig:ispconfig '.$install_dir.'/extensions'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Chmod the files and directories in the acme dir $command = 'chmod -R 755 '.$install_dir.'/interface/acme'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the server files to the root user and group $command = 'chown -R root:root '.$install_dir.'/server'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security files to the root user and group $command = 'chown -R root:root '.$install_dir.'/security'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* chown the security directory and security_settings.ini to root:ispconfig $command = 'chown root:ispconfig '.$install_dir.'/security/security_settings.ini'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.whitelist'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/ids.htmlfield'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/apache_directives.blacklist'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); $command = 'chown root:ispconfig '.$install_dir.'/security/nginx_directives.blacklist'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); //* Make the global language file directory group writable exec("chmod -R 770 $install_dir/interface/lib/lang"); //* Make the temp directory for language file exports writable if(is_dir($install_dir.'/interface/web/temp')) exec("chmod -R 770 $install_dir/interface/web/temp"); //* Make all interface language file directories group writable $handle = @opendir($install_dir.'/interface/web'); while ($file = @readdir($handle)) { if ($file != '.' && $file != '..') { if(@is_dir($install_dir.'/interface/web'.'/'.$file.'/lib/lang')) { $handle2 = opendir($install_dir.'/interface/web'.'/'.$file.'/lib/lang'); chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang', 0770); while ($lang_file = @readdir($handle2)) { if ($lang_file != '.' && $lang_file != '..') { chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang/'.$lang_file, 0770); } } } } } //* Make the APS directories group writable exec("chmod -R 770 $install_dir/interface/web/sites/aps_meta_packages"); exec("chmod -R 770 $install_dir/server/aps_packages"); //* make sure that the server config file (not the interface one) is only readable by the root user chmod($install_dir.'/server/lib/config.inc.php', 0600); chown($install_dir.'/server/lib/config.inc.php', 'root'); chgrp($install_dir.'/server/lib/config.inc.php', 'root'); //* Make sure thet the interface config file is readable by user ispconfig only chmod($install_dir.'/interface/lib/config.inc.php', 0600); chown($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); chgrp($install_dir.'/interface/lib/config.inc.php', 'ispconfig'); chmod($install_dir.'/server/lib/remote_action.inc.php', 0600); chown($install_dir.'/server/lib/remote_action.inc.php', 'root'); chgrp($install_dir.'/server/lib/remote_action.inc.php', 'root'); if(@is_file($install_dir.'/server/lib/mysql_clientdb.conf')) { chmod($install_dir.'/server/lib/mysql_clientdb.conf', 0600); chown($install_dir.'/server/lib/mysql_clientdb.conf', 'root'); chgrp($install_dir.'/server/lib/mysql_clientdb.conf', 'root'); } if(@is_file($install_dir.'/server/lib/postgresql_clientdb.conf')) { chmod($install_dir.'/server/lib/postgresql_clientdb.conf', 0600); chown($install_dir.'/server/lib/postgresql_clientdb.conf', 'root'); chgrp($install_dir.'/server/lib/postgresql_clientdb.conf', 'root'); } if(is_dir($install_dir.'/interface/invoices')) { exec('chmod -R 770 '.escapeshellarg($install_dir.'/interface/invoices')); exec('chown -R ispconfig:ispconfig '.escapeshellarg($install_dir.'/interface/invoices')); } exec('chown -R root:root /usr/local/ispconfig/interface/ssl'); // TODO: FIXME: add the www-data user to the ispconfig group. This is just for testing // and must be fixed as this will allow the apache user to read the ispconfig files. // Later this must run as own apache server or via suexec! if($conf['apache']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['apache']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['apache']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } if($conf['nginx']['installed'] == true){ $command = 'usermod -a -G ispconfig '.$conf['nginx']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if(is_group('ispapps')){ $command = 'usermod -a -G ispapps '.$conf['nginx']['user']; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } //* Make the shell scripts executable $command = "chmod +x $install_dir/server/scripts/*.sh"; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); if ($this->install_ispconfig_interface == true && isset($conf['interface_password']) && $conf['interface_password']!='admin') { $sql = "UPDATE sys_user SET passwort = ? WHERE username = 'admin';"; $this->db->query($sql, $this->crypt_password($conf['interface_password'])); } if($conf['apache']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel $vhost_conf_dir = $conf['apache']['vhost_conf_dir']; //$vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $tpl = new tpl(); if (file_exists($conf['ispconfig_install_dir']."/server/conf-custom/install/apache_ispconfig.vhost.master")) { $tpl->newTemplate($conf['ispconfig_install_dir']."/server/conf-custom/install/apache_ispconfig.vhost.master"); } else { $tpl->newTemplate("dist/tpl/gentoo/apache_ispconfig.vhost.master"); } $tpl->setVar('vhost_port',$conf['apache']['vhost_port']); // comment out the listen directive if port is 80 or 443 if($conf['apache']['vhost_port'] == 80 or $conf['apache']['vhost_port'] == 443) { $tpl->setVar('vhost_port_listen','#'); } else { $tpl->setVar('vhost_port_listen',''); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $tpl->setVar('ssl_comment',''); } else { $tpl->setVar('ssl_comment','#'); } if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key') && is_file($install_dir.'/interface/ssl/ispserver.bundle')) { $tpl->setVar('ssl_bundle_comment',''); } else { $tpl->setVar('ssl_bundle_comment','#'); } $tpl->setVar('apache_version',getapacheversion()); wf($vhost_conf_dir.'/ispconfig.vhost', $tpl->grab()); //* and create the symlink /*if($this->is_update == false) { if(@is_link($vhost_conf_enabled_dir.'/ispconfig.vhost')) unlink($vhost_conf_enabled_dir.'/ispconfig.vhost'); if(!@is_link($vhost_conf_enabled_dir.'/000-ispconfig.vhost')) { symlink($vhost_conf_dir.'/ispconfig.vhost', $vhost_conf_enabled_dir.'/000-ispconfig.vhost'); } }*/ //if(!is_file('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter')) { $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apache_ispconfig_fcgi_starter.master', 'tpl/apache_ispconfig_fcgi_starter.master'); $content = str_replace('{fastcgi_bin}', $conf['fastcgi']['fastcgi_bin'], $content); $content = str_replace('{fastcgi_phpini_path}', $conf['fastcgi']['fastcgi_phpini_path'], $content); @mkdir('/var/www/php-fcgi-scripts/ispconfig', 0755, true); $this->set_immutable('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', false); wf('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', $content); exec('chmod +x /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter'); @symlink($install_dir.'/interface/web', '/var/www/ispconfig'); exec('chown -R ispconfig:ispconfig /var/www/php-fcgi-scripts/ispconfig'); $this->set_immutable('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', true); //} // unlink acme vhost symlink if(is_link($vhost_conf_dir . '/999-acme.conf') && file_exists($vhost_conf_dir . '/acme.conf')) unlink($vhost_conf_dir . '/999-acme.conf'); } if($conf['nginx']['installed'] == true && $this->install_ispconfig_interface == true){ //* Copy the ISPConfig vhost for the controlpanel $vhost_conf_dir = $conf['nginx']['vhost_conf_dir']; $vhost_conf_enabled_dir = $conf['nginx']['vhost_conf_enabled_dir']; // Dont just copy over the virtualhost template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/nginx_ispconfig.vhost.master', 'tpl/nginx_ispconfig.vhost.master'); $content = str_replace('{vhost_port}', $conf['nginx']['vhost_port'], $content); if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) { $content = str_replace('{ssl_on}', 'ssl http2', $content); $content = str_replace('{ssl_comment}', '', $content); $content = str_replace('{fastcgi_ssl}', 'on', $content); } else { $content = str_replace('{ssl_on}', '', $content); $content = str_replace('{ssl_comment}', '#', $content); $content = str_replace('{fastcgi_ssl}', 'off', $content); } $socket_dir = escapeshellcmd($conf['nginx']['php_fpm_socket_dir']); if(substr($socket_dir, -1) != '/') $socket_dir .= '/'; if(!is_dir($socket_dir)) exec('mkdir -p '.$socket_dir); $fpm_socket = $socket_dir.'ispconfig.sock'; //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); wf($vhost_conf_dir.'/ispconfig.vhost', $content); unset($content); // PHP-FPM // Dont just copy over the php-fpm pool template but add some custom settings $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/php_fpm_pool.conf.master', 'tpl/php_fpm_pool.conf.master'); $content = str_replace('{fpm_pool}', 'ispconfig', $content); //$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content); $content = str_replace('{fpm_socket}', $fpm_socket, $content); $content = str_replace('{fpm_user}', 'ispconfig', $content); $content = str_replace('{fpm_group}', 'ispconfig', $content); wf($conf['nginx']['php_fpm_pool_dir'].'/ispconfig.conf', $content); //copy('tpl/nginx_ispconfig.vhost.master', $vhost_conf_dir.'/ispconfig.vhost'); //* and create the symlink if($this->is_update == false) { if(@is_link($vhost_conf_enabled_dir.'/ispconfig.vhost')) unlink($vhost_conf_enabled_dir.'/ispconfig.vhost'); if(!@is_link($vhost_conf_enabled_dir.'/000-ispconfig.vhost')) { symlink($vhost_conf_dir.'/ispconfig.vhost', $vhost_conf_enabled_dir.'/000-ispconfig.vhost'); } } } //* Install the update script if(is_file('/usr/local/bin/ispconfig_update_from_dev.sh')) unlink('/usr/local/bin/ispconfig_update_from_dev.sh'); chown($install_dir.'/server/scripts/update_from_dev.sh', 'root'); chmod($install_dir.'/server/scripts/update_from_dev.sh', 0700); // chown($install_dir.'/server/scripts/update_from_tgz.sh', 'root'); // chmod($install_dir.'/server/scripts/update_from_tgz.sh', 0700); chown($install_dir.'/server/scripts/ispconfig_update.sh', 'root'); chmod($install_dir.'/server/scripts/ispconfig_update.sh', 0700); if(!is_link('/usr/local/bin/ispconfig_update_from_dev.sh')) symlink($install_dir.'/server/scripts/ispconfig_update.sh', '/usr/local/bin/ispconfig_update_from_dev.sh'); if(!is_link('/usr/local/bin/ispconfig_update.sh')) symlink($install_dir.'/server/scripts/ispconfig_update.sh', '/usr/local/bin/ispconfig_update.sh'); // Install ISPConfig cli command if(is_file('/usr/local/bin/ispc')) unlink('/usr/local/bin/ispc'); chown($install_dir.'/server/cli/ispc', 'root'); chmod($install_dir.'/server/cli/ispc', 0700); symlink($install_dir.'/server/cli/ispc', '/usr/local/bin/ispc'); // Make executable then unlink and symlink letsencrypt pre, post and renew hook scripts chown($install_dir.'/server/scripts/letsencrypt_pre_hook.sh', 'root'); chown($install_dir.'/server/scripts/letsencrypt_post_hook.sh', 'root'); chown($install_dir.'/server/scripts/letsencrypt_renew_hook.sh', 'root'); chmod($install_dir.'/server/scripts/letsencrypt_pre_hook.sh', 0700); chmod($install_dir.'/server/scripts/letsencrypt_post_hook.sh', 0700); chmod($install_dir.'/server/scripts/letsencrypt_renew_hook.sh', 0700); if(is_link('/usr/local/bin/letsencrypt_pre_hook.sh')) unlink('/usr/local/bin/letsencrypt_pre_hook.sh'); if(is_link('/usr/local/bin/letsencrypt_post_hook.sh')) unlink('/usr/local/bin/letsencrypt_post_hook.sh'); if(is_link('/usr/local/bin/letsencrypt_renew_hook.sh')) unlink('/usr/local/bin/letsencrypt_renew_hook.sh'); symlink($install_dir.'/server/scripts/letsencrypt_pre_hook.sh', '/usr/local/bin/letsencrypt_pre_hook.sh'); symlink($install_dir.'/server/scripts/letsencrypt_post_hook.sh', '/usr/local/bin/letsencrypt_post_hook.sh'); symlink($install_dir.'/server/scripts/letsencrypt_renew_hook.sh', '/usr/local/bin/letsencrypt_renew_hook.sh'); //* Create the ispconfig log file and directory if(!is_file($conf['ispconfig_log_dir'].'/ispconfig.log')) { if(!is_dir($conf['ispconfig_log_dir'])) mkdir($conf['ispconfig_log_dir'], 0755); touch($conf['ispconfig_log_dir'].'/ispconfig.log'); } chmod($conf['ispconfig_log_dir'].'/ispconfig.log', 0600); //* Create the ispconfig auth log file and set uid/gid if(!is_file($conf['ispconfig_log_dir'].'/auth.log')) { touch($conf['ispconfig_log_dir'].'/auth.log'); } exec('chown ispconfig:ispconfig '. $conf['ispconfig_log_dir'].'/auth.log'); exec('chmod 660 '. $conf['ispconfig_log_dir'].'/auth.log'); if(is_user('getmail')) { rename($install_dir.'/server/scripts/run-getmail.sh', '/usr/local/bin/run-getmail.sh'); if(is_user('getmail')) chown('/usr/local/bin/run-getmail.sh', 'getmail'); chmod('/usr/local/bin/run-getmail.sh', 0744); } //* Add Log-Rotation if (is_dir('/etc/logrotate.d')) { @unlink('/etc/logrotate.d/logispc3'); // ignore, if the file is not there /* These logs are rotated by the cron job server/lib/classes/cron.d/200-logfiles.inc.php $fh = fopen('/etc/logrotate.d/logispc3', 'w'); fwrite($fh, "$conf['ispconfig_log_dir']/ispconfig.log { \n" . " weekly \n" . " missingok \n" . " rotate 4 \n" . " compress \n" . " delaycompress \n" . "} \n" . "$conf['ispconfig_log_dir']/cron.log { \n" . " weekly \n" . " missingok \n" . " rotate 4 \n" . " compress \n" . " delaycompress \n" . "}"); fclose($fh); */ } //* Remove Domain module as its functions are available in the client module now if(@is_dir('/usr/local/ispconfig/interface/web/domain')) exec('rm -rf /usr/local/ispconfig/interface/web/domain'); //* Disable rkhunter run and update in debian cronjob as ispconfig is running and updating rkhunter if(is_file('/etc/default/rkhunter')) { replaceLine('/etc/default/rkhunter', 'CRON_DAILY_RUN="yes"', 'CRON_DAILY_RUN="no"', 1, 0); replaceLine('/etc/default/rkhunter', 'CRON_DB_UPDATE="yes"', 'CRON_DB_UPDATE="no"', 1, 0); } // Add symlink for patch tool if(!is_link('/usr/local/bin/ispconfig_patch')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_patch /usr/local/bin/ispconfig_patch'); // Change mode of a few files from amavisd if(is_file($conf['amavis']['config_dir'].'/conf.d/50-user')) chmod($conf['amavis']['config_dir'].'/conf.d/50-user', 0640); if(is_file($conf['amavis']['config_dir'].'/50-user~')) chmod($conf['amavis']['config_dir'].'/50-user~', 0400); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf')) chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(is_file($conf['amavis']['config_dir'].'/amavisd.conf~')) chmod($conf['amavis']['config_dir'].'/amavisd.conf~', 0400); } } ?> ispconfig3_install/install/dist/lib/centos53.lib.php0000775000000000000000000000336015114346020021451 0ustar rootroot ispconfig3_install/install/dist/lib/enterpriselinux10.lib.php0000775000000000000000000000341615152616670023426 0ustar rootroot ispconfig3_install/install/dist/lib/debian60.lib.php0000775000000000000000000002565315273367323021426 0ustar rootrootis_update) { $tmp = $this->db->queryOneRecord("SELECT * FROM ?? WHERE server_id = ?", $conf["mysql"]["database"] . ".server", $conf['server_id']); $ini_array = ini_to_array(stripslashes($tmp['config'])); // ini_array needs not to be checked, because already done in update.php -> updateDbAndIni() if(isset($ini_array['mail']['mailbox_virtual_uidgid_maps']) && $ini_array['mail']['mailbox_virtual_uidgid_maps'] == 'y') { $virtual_transport = 'lmtp:unix:private/dovecot-lmtp'; $configure_lmtp = true; } } $config_dir = $conf['postfix']['config_dir']; if(!$this->get_postfix_service('dovecot', 'unix')) { //* backup if(is_file($config_dir.'/master.cf')){ copy($config_dir.'/master.cf', $config_dir.'/master.cf~2'); } if(is_file($config_dir.'/master.cf~2')){ chmod($config_dir.'/master.cf~2', 0400); } //* Configure master.cf and add a line for deliver $content = rf($conf["postfix"]["config_dir"].'/master.cf'); $deliver_content = 'dovecot unix - n n - - pipe'."\n".' flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop}'."\n"; af($config_dir.'/master.cf', $deliver_content); unset($content); unset($deliver_content); } //* Reconfigure postfix to use dovecot authentication $postconf_commands = array ( 'dovecot_destination_recipient_limit = 1', 'virtual_transport = '.$virtual_transport, 'smtpd_sasl_type = dovecot', 'smtpd_sasl_path = private/auth' ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~3'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } //* copy dovecot.conf $config_dir = $conf['dovecot']['config_dir']; $configfile = 'dovecot.conf'; if(is_file($config_dir.'/'.$configfile)){ copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); } //* Get the dovecot version exec('dovecot --version', $tmp); $dovecot_version = $tmp[0]; unset($tmp); //* Copy dovecot configuration file if(version_compare($dovecot_version,2) >= 0) { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot2.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot2.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/debian6_dovecot2.conf.master', $config_dir.'/'.$configfile); } // Copy custom config file if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master')) { if(!@is_dir($config_dir . '/conf.d')) { mkdir($config_dir . '/conf.d'); } copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master', $config_dir.'/conf.d/99-ispconfig-custom-config.conf'); } replaceLine($config_dir.'/'.$configfile, 'postmaster_address = postmaster@example.com', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); replaceLine($config_dir.'/'.$configfile, 'postmaster_address = webmaster@localhost', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); if(version_compare($dovecot_version,2.1) < 0) { removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); } if(version_compare($dovecot_version,2.2) >= 0) { // Dovecot > 2.2 does not recognize !SSLv2 anymore on Debian 9 $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('!SSLv2','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } if(version_compare($dovecot_version, 2.4) >= 0) { // Debian 13 ships with Dovecot 2.4 $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot2.4.conf.master', 'tpl/debian6_dovecot2.4.conf.master'); $content = str_replace('{server_id}', $conf['server_id'], $content); wf($config_dir.'/'.$configfile, $content); // Copy custom config file if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master')) { if(!@is_dir($config_dir . '/conf.d')) { @mkdir($config_dir . '/conf.d'); } copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/dovecot_custom.conf.master', $config_dir.'/conf.d/99-ispconfig-custom-config.conf'); } replaceLine($config_dir.'/'.$configfile, 'postmaster_address = postmaster@example.com', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); replaceLine($config_dir.'/'.$configfile, 'postmaster_address = webmaster@localhost', 'postmaster_address = postmaster@'.$conf['hostname'], 1, 0); ## Self generating dhparams is deprecated, Debian ships with a good one. unset($content); } elseif(version_compare($dovecot_version,2.3) >= 0) { // Remove deprecated setting(s) removeLine($config_dir.'/'.$configfile, 'ssl_protocols ='); // Check if we have a dhparams file and if not, create it if(!file_exists('/etc/dovecot/dh.pem')) { swriteln('Creating new DHParams file, this takes several minutes. Do not interrupt the script.'); if(file_exists('/var/lib/dovecot/ssl-parameters.dat')) { // convert existing ssl parameters file $command = 'dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } else { /* Create a new dhparams file. We use 2048 bit only as it simply takes too long on smaller systems to generate a 4096 bit dh file (> 30 minutes). If you need a 4096 bit file, create it manually before you install ISPConfig */ $command = 'openssl dhparam -out /etc/dovecot/dh.pem 2048'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } //remove #2.3+ comment $content = file_get_contents($config_dir.'/'.$configfile); $content = str_replace('#2.3+ ','',$content); file_put_contents($config_dir.'/'.$configfile,$content); unset($content); } else { // remove settings which are not supported in Dovecot < 2.3 removeLine($config_dir.'/'.$configfile, 'ssl_min_protocol ='); removeLine($config_dir.'/'.$configfile, 'ssl_dh ='); } } else { if(is_file($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot.conf.master')) { copy($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot.conf.master', $config_dir.'/'.$configfile); } else { copy('tpl/debian6_dovecot.conf.master', $config_dir.'/'.$configfile); } } $dovecot_protocols = 'imap pop3'; //* dovecot-lmtpd if($configure_lmtp) { $dovecot_protocols .= ' lmtp'; } //* dovecot-managesieved if(is_file('/usr/lib/dovecot/managesieve') || is_file('/usr/libexec/dovecot/managesieve')) { $dovecot_protocols .= ' sieve'; } replaceLine($config_dir.'/'.$configfile, 'protocols = imap pop3', "protocols = $dovecot_protocols", 1, 0); //* dovecot-sql.conf $configfile = 'dovecot-sql.conf'; if(is_file($config_dir.'/'.$configfile)){ copy($config_dir.'/'.$configfile, $config_dir.'/'.$configfile.'~'); chmod($config_dir.'/'.$configfile.'~', 0400); } if(version_compare($dovecot_version, 2.4) >= 0) { $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot2.4-sql.conf.master', 'tpl/debian6_dovecot2.4-sql.conf.master'); } else { $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/debian6_dovecot-sql.conf.master', 'tpl/debian6_dovecot-sql.conf.master'); } $content = str_replace('{mysql_server_ispconfig_user}', $conf['mysql']['ispconfig_user'], $content); $content = str_replace('{mysql_server_ispconfig_password}', $conf['mysql']['ispconfig_password'], $content); $content = str_replace('{mysql_server_database}', $conf['mysql']['database'], $content); $content = str_replace('{mysql_server_host}', $conf['mysql']['host'], $content); $content = str_replace('{mysql_server_port}', $conf['mysql']['port'], $content); $content = str_replace('{server_id}', $conf['server_id'], $content); # enable iterate_query for dovecot2 if(version_compare($dovecot_version,2, '>=')) { $content = str_replace('# iterate_query', 'iterate_query', $content); } wf($config_dir.'/'.$configfile, $content); chmod($config_dir.'/'.$configfile, 0600); chown($config_dir.'/'.$configfile, 'root'); chgrp($config_dir.'/'.$configfile, 'root'); // Dovecot shall ignore mounts in website directory if(is_installed('doveadm')) exec("doveadm mount add '/var/www/*' ignore > /dev/null 2> /dev/null"); } public function configure_fail2ban() { /* copy('tpl/dovecot-pop3imap.conf.master',"/etc/fail2ban/filter.d/dovecot-pop3imap.conf"); copy('tpl/dovecot_fail2ban_jail.local.master','/etc/fail2ban/jail.local'); */ } } ?> ispconfig3_install/install/dist/lib/opensuse112.lib.php0000775000000000000000000000306315114346020022073 0ustar rootroot ispconfig3_install/install/dist/lib/enterpriselinux_base.lib.php0000775000000000000000000002303515273367323024260 0ustar rootrootclamav_socket, $content); $content = str_replace('{amavis_config_dir}', $conf['amavis']['config_dir'], $content); wf($conf["amavis"]["config_dir"].'/amavisd.conf', $content); chmod($conf['amavis']['config_dir'].'/amavisd.conf', 0640); if(!is_file($conf['amavis']['config_dir'].'/60-dkim')) { touch($conf['amavis']['config_dir'].'/60-dkim'); chmod($conf['amavis']['config_dir'].'/60-dkim', 0640); } // Adding the amavisd commands to the postfix configuration $postconf_commands = array ( 'content_filter = amavis:[127.0.0.1]:10024', 'receive_override_options = no_address_mappings' ); // Make a backup copy of the main.cf file copy($conf["postfix"]["config_dir"].'/main.cf', $conf["postfix"]["config_dir"].'/main.cf~2'); // Executing the postconf commands foreach($postconf_commands as $cmd) { $command = "postconf -e '$cmd'"; caselog($command." > /dev/null 2>&1", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } $config_dir = $conf['postfix']['config_dir']; // Adding amavis-services to the master.cf file // backup master.cf if(is_file($config_dir.'/master.cf')) copy($config_dir.'/master.cf', $config_dir.'/master.cf~'); // first remove the old service definitions $this->remove_postfix_service('amavis','unix'); $this->remove_postfix_service('127.0.0.1:10025','inet'); $this->remove_postfix_service('127.0.0.1:10027','inet'); // then add them back $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis.master', 'tpl/master_cf_amavis.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10025.master', 'tpl/master_cf_amavis10025.master'); af($config_dir.'/master.cf', $content); unset($content); $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10027.master', 'tpl/master_cf_amavis10027.master'); af($config_dir.'/master.cf', $content); unset($content); removeLine('/etc/sysconfig/freshclam', 'FRESHCLAM_DELAY=disabled-warn # REMOVE ME', 1); replaceLine('/etc/freshclam.conf', 'Example', '# Example', 1); // get shell-group for amavis $amavis_group=exec('grep -o "^amavis:\|^vscan:" /etc/group'); if(!empty($amavis_group)) { $amavis_group=rtrim($amavis_group, ":"); } // get shell-user for amavis $amavis_user=exec('grep -o "^amavis:\|^vscan:" /etc/passwd'); if(!empty($amavis_user)) { $amavis_user=rtrim($amavis_user, ":"); } // Create the director for DKIM-Keys if(!is_dir('/var/lib/amavis')) mkdir('/var/lib/amavis', 0750, true); if(!empty($amavis_user)) exec('chown '.$amavis_user.' /var/lib/amavis'); if(!empty($amavis_group)) exec('chgrp '.$amavis_group.' /var/lib/amavis'); if(!is_dir('/var/lib/amavis/dkim')) mkdir('/var/lib/amavis/dkim', 0750); if(!empty($amavis_user)) exec('chown -R '.$amavis_user.' /var/lib/amavis/dkim'); if(!empty($amavis_group)) exec('chgrp -R '.$amavis_group.' /var/lib/amavis/dkim'); } public function install_ispconfig() { parent::install_ispconfig(); // Set SELinux contexts for ISPConfig directories $this->set_selinux_contexts(); // Configure systemd httpd hardening workaround for ISPConfig $this->configure_httpd_systemd_override(); } public function configure_httpd_systemd_override() { global $conf; // Only apply if Apache is installed and systemd is in use if($conf['apache']['installed'] == false) return; if(!is_executable('/bin/systemctl') && !is_executable('/usr/bin/systemctl')) return; // Check if httpd.service has ProtectSystem enabled $protect_system = @exec('systemctl show httpd -p ProtectSystem --value 2>/dev/null'); if(empty($protect_system) || $protect_system == 'no' || $protect_system == 'false') { return; } $install_dir = $conf['ispconfig_install_dir']; $dropin_dir = '/etc/systemd/system/httpd.service.d'; $dropin_file = $dropin_dir.'/ispconfig.conf'; // Create drop-in directory if it doesn't exist if(!is_dir($dropin_dir)) { mkdir($dropin_dir, 0755, true); } // Directories that Apache needs write access to under /usr/local/ispconfig $writable_paths = array( $install_dir.'/interface/temp', $install_dir.'/interface/web/temp', $install_dir.'/interface/cache', $install_dir.'/interface/invoices' ); // Filter to only existing directories $existing_paths = array(); foreach($writable_paths as $path) { if(is_dir($path)) { $existing_paths[] = $path; } } if(count($existing_paths) == 0) { return; } swriteln('Configuring systemd httpd override for ISPConfig writable directories...'); // Build the drop-in configuration content $content = "[Service]\n"; foreach($existing_paths as $path) { $content .= "ReadWritePaths=".$path."\n"; } // Write the drop-in file wf($dropin_file, $content); chmod($dropin_file, 0644); // Reload systemd to apply changes $command = 'systemctl daemon-reload'; caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } public function set_selinux_contexts() { global $conf; $install_dir = $conf['ispconfig_install_dir']; // Check if SELinux is installed and enforcing $selinux_status = @exec('getenforce 2>/dev/null'); if($selinux_status != 'Enforcing' && $selinux_status != 'Permissive') { return; } // Check if required SELinux tools are available if(!is_executable('/usr/sbin/semanage') && !is_executable('/sbin/semanage')) { swriteln('SELinux is enabled but semanage tool is not available. Please install policycoreutils-python-utils package.'); return; } swriteln('Configuring SELinux contexts for ISPConfig...'); // Directories that need httpd write access $writable_dirs = array( $install_dir.'/interface/temp', $install_dir.'/interface/web/temp' ); foreach($writable_dirs as $dir) { if(is_dir($dir)) { // Set the context immediately $command = 'chcon -R -t httpd_sys_rw_content_t '.escapeshellarg($dir); caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); // Make the context persistent across relabels $command = 'semanage fcontext -a -t httpd_sys_rw_content_t '.escapeshellarg($dir.'(/.*)?').' 2>/dev/null || semanage fcontext -m -t httpd_sys_rw_content_t '.escapeshellarg($dir.'(/.*)?'); caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); // Apply the persistent context $command = 'restorecon -Rv '.escapeshellarg($dir); caselog($command.' > /dev/null 2>&1', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command"); } } } } ?> ispconfig3_install/install/uninstall.php0000775000000000000000000001066215152616670017561 0ustar rootroot> Uninstall \n\n"; echo "Are you sure you want to uninstall ISPConfig? [no]"; $input = fgets(STDIN); $do_uninstall = rtrim($input); if($do_uninstall == 'yes') { echo "\n\n>> Uninstalling ISPConfig 3... \n\n"; $link = mysqli_connect($clientdb_host, $clientdb_user, $clientdb_password); if (!$link) { echo "Unable to connect to the database. mysql_error($link)"; } else { $result=mysqli_query($link,"DROP DATABASE ".$conf['db_database'].";"); if (!$result) echo "Unable to remove the ispconfig-database ".$conf['db_database']." ".mysqli_error($link)."\n"; $result=mysqli_query($link,"DROP USER '".$conf['db_user']."'@'".$conf['db_host']."';"); if (!$result) echo "Unable to remove the ispconfig-database-user ".$conf['db_user']." ".mysqli_error($link)."\n"; } mysqli_close($link); // Deleting the symlink in /var/www // Apache @unlink("/etc/apache2/sites-enabled/000-ispconfig.vhost"); @unlink("/etc/apache2/sites-available/ispconfig.vhost"); @unlink("/etc/apache2/sites-enabled/000-apps.vhost"); @unlink("/etc/apache2/sites-available/apps.vhost"); // nginx @unlink("/etc/nginx/sites-enabled/000-ispconfig.vhost"); @unlink("/etc/nginx/sites-available/ispconfig.vhost"); @unlink("/etc/nginx/sites-enabled/000-apps.vhost"); @unlink("/etc/nginx/sites-available/apps.vhost"); // Delete the ispconfig files exec('rm -rf /usr/local/ispconfig'); // Delete various other files @unlink("/usr/local/bin/letsencrypt_post_hook.sh"); @unlink("/usr/local/bin/letsencrypt_pre_hook.sh"); @unlink("/usr/local/bin/letsencrypt_renew_hook.sh"); @unlink("/usr/local/bin/ispconfig_update.sh"); @unlink("/usr/local/bin/ispconfig_update_from_svn.sh"); @unlink("/var/spool/mail/ispconfig"); @unlink("/var/www/ispconfig"); @exec('chattr -i /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter'); @unlink("/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter"); @unlink("/var/www/php-fcgi-scripts/ispconfig"); @unlink("/etc/ssl/private/pure-ftpd.pem"); echo "Backups in /var/backup/ and log files in /var/log/ispconfig are not deleted."; echo "Finished uninstalling.\n"; } else { echo "\n\n>> Canceled uninstall. \n\n"; } ?> ispconfig3_install/install/patches/0000775000000000000000000000000015273367323016460 5ustar rootrootispconfig3_install/install/patches/upd_0086.php0000775000000000000000000000203115273367323020435 0ustar rootroot ispconfig3_install/install/patches/upd_0094.php0000775000000000000000000000115615114346020020424 0ustar rootrootdb->query("DELETE FROM mail_forwarding WHERE forwarding_id NOT IN (SELECT MIN(forwarding_id) FROM mail_forwarding GROUP BY source)"); // Remove any duplicate mail_transports prior to adding unique key $inst->db->query("DELETE FROM mail_transport WHERE transport_id NOT IN (SELECT MIN(transport_id) FROM mail_transport GROUP BY domain, server_id)"); } } ispconfig3_install/install/patches/upd_0108.php0000775000000000000000000003727415273367323020451 0ustar rootrootdb->queryAllRecords($sql, $conf['server_id']); foreach($records as $rec) { $tmp_dir = $rec['document_root'].'/tmp'; if(is_dir($tmp_dir) && !is_link($tmp_dir) && (fileperms($tmp_dir) & 07777) == 0777) { chmod($tmp_dir, 0770); ilog('Set the permissions of '.$tmp_dir.' to 0770'); } $home_dir = $rec['document_root'].'/home'; if(is_dir($home_dir) && !is_link($home_dir) && (fileowner($home_dir) != 0 || filegroup($home_dir) != 0 || (fileperms($home_dir) & 07777) != 0755)) { chown($home_dir, 'root'); chgrp($home_dir, 'root'); chmod($home_dir, 0755); ilog('Set the owner of '.$home_dir.' to root:root and the permissions to 0755'); } } //* the chmod runs as the shell user, the home directory belongs to the website user $records = $inst->db->queryAllRecords("SELECT dir, username FROM shell_user WHERE server_id = ? AND dir != '' AND username != ''", $conf['server_id']); foreach($records as $rec) { $history = $rec['dir'].'/home/'.$rec['username'].'/.bash_history'; if(is_file($history) && !is_link($history) && (fileperms($history) & 07777) == 0750) { exec('/sbin/runuser -u '.escapeshellarg($rec['username']).' -- chmod 0600 '.escapeshellarg($history).' 2>/dev/null', $out, $ret); if($ret == 0) ilog('Set the permissions of '.$history.' to 0600'); else ilog('Could not set the permissions of '.$history.' to 0600'); } } // delete all the files that were deleted on previous updates $delete = array( 'interface/web/mail/autoconfig/autodiscover.php', 'interface/web/mail/autoconfig/index.php', 'interface/web/monitor/datalog_del.php', 'interface/web/mail/form/spamfilter_config.tform.php', 'interface/web/mail/lib/lang/ar_spamfilter_config.lng', 'interface/web/mail/lib/lang/ar_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/bg_spamfilter_config.lng', 'interface/web/mail/lib/lang/bg_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/br_spamfilter_config.lng', 'interface/web/mail/lib/lang/br_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/ca_spamfilter_config.lng', 'interface/web/mail/lib/lang/ca_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/cn_spamfilter_config.lng', 'interface/web/mail/lib/lang/cn_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/cz_spamfilter_config.lng', 'interface/web/mail/lib/lang/cz_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/de_spamfilter_config.lng', 'interface/web/mail/lib/lang/de_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/dk_spamfilter_config.lng', 'interface/web/mail/lib/lang/dk_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/el_spamfilter_config.lng', 'interface/web/mail/lib/lang/el_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/en_spamfilter_config.lng', 'interface/web/mail/lib/lang/en_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/es_spamfilter_config.lng', 'interface/web/mail/lib/lang/es_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/fi_spamfilter_config.lng', 'interface/web/mail/lib/lang/fi_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/fr_spamfilter_config.lng', 'interface/web/mail/lib/lang/fr_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/hr_spamfilter_config.lng', 'interface/web/mail/lib/lang/hr_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/hu_spamfilter_config.lng', 'interface/web/mail/lib/lang/hu_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/id_spamfilter_config.lng', 'interface/web/mail/lib/lang/id_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/it_spamfilter_config.lng', 'interface/web/mail/lib/lang/it_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/ja_spamfilter_config.lng', 'interface/web/mail/lib/lang/ja_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/jp_spamfilter_config.lng', 'interface/web/mail/lib/lang/jp_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/nl_spamfilter_config.lng', 'interface/web/mail/lib/lang/nl_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/pl_spamfilter_config.lng', 'interface/web/mail/lib/lang/pl_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/pt_spamfilter_config.lng', 'interface/web/mail/lib/lang/pt_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/ro_spamfilter_config.lng', 'interface/web/mail/lib/lang/ro_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/ru_spamfilter_config.lng', 'interface/web/mail/lib/lang/ru_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/se_spamfilter_config.lng', 'interface/web/mail/lib/lang/se_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/sk_spamfilter_config.lng', 'interface/web/mail/lib/lang/sk_spamfilter_config_list.lng', 'interface/web/mail/lib/lang/tr_spamfilter_config.lng', 'interface/web/mail/lib/lang/tr_spamfilter_config_list.lng', 'interface/web/mail/list/spamfilter_config.list.php', 'interface/web/mail/spamfilter_config_del.php', 'interface/web/mail/spamfilter_config_edit.php', 'interface/web/mail/spamfilter_config_list.php', 'interface/web/mail/templates/spamfilter_config_getmail_edit.htm', 'interface/web/mail/templates/spamfilter_config_list.htm', 'interface/web/mail/templates/spamfilter_config_mail_edit.htm', 'interface/web/mail/templates/spamfilter_config_server_edit.htm', 'interface/web/mail/mail_spamfilter_del.php', 'interface/web/mail/mail_spamfilter_edit.php', 'interface/web/mail/mail_spamfilter_list.php', 'interface/web/mail/form/mail_spamfilter.tform.php', 'interface/web/mail/list/mail_spamfilter.list.php', 'interface/web/mail/lib/lang/ar_mail_spamfilter.lng', 'interface/web/mail/lib/lang/ar_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/bg_mail_spamfilter.lng', 'interface/web/mail/lib/lang/bg_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/br_mail_spamfilter.lng', 'interface/web/mail/lib/lang/br_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/ca_mail_spamfilter.lng', 'interface/web/mail/lib/lang/ca_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/cn_mail_spamfilter.lng', 'interface/web/mail/lib/lang/cn_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/cz_mail_spamfilter.lng', 'interface/web/mail/lib/lang/cz_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/de_mail_spamfilter.lng', 'interface/web/mail/lib/lang/de_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/dk_mail_spamfilter.lng', 'interface/web/mail/lib/lang/dk_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/el_mail_spamfilter.lng', 'interface/web/mail/lib/lang/el_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/en_mail_spamfilter.lng', 'interface/web/mail/lib/lang/en_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/es_mail_spamfilter.lng', 'interface/web/mail/lib/lang/es_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/fi_mail_spamfilter.lng', 'interface/web/mail/lib/lang/fi_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/fr_mail_spamfilter.lng', 'interface/web/mail/lib/lang/fr_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/hr_mail_spamfilter.lng', 'interface/web/mail/lib/lang/hr_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/hu_mail_spamfilter.lng', 'interface/web/mail/lib/lang/hu_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/id_mail_spamfilter.lng', 'interface/web/mail/lib/lang/id_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/it_mail_spamfilter.lng', 'interface/web/mail/lib/lang/it_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/ja_mail_spamfilter.lng', 'interface/web/mail/lib/lang/ja_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/jp_mail_spamfilter.lng', 'interface/web/mail/lib/lang/jp_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/nl_mail_spamfilter.lng', 'interface/web/mail/lib/lang/nl_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/pl_mail_spamfilter.lng', 'interface/web/mail/lib/lang/pl_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/pt_mail_spamfilter.lng', 'interface/web/mail/lib/lang/pt_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/ro_mail_spamfilter.lng', 'interface/web/mail/lib/lang/ro_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/ru_mail_spamfilter.lng', 'interface/web/mail/lib/lang/ru_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/se_mail_spamfilter.lng', 'interface/web/mail/lib/lang/se_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/sk_mail_spamfilter.lng', 'interface/web/mail/lib/lang/sk_mail_spamfilter_list.lng', 'interface/web/mail/lib/lang/tr_mail_spamfilter.lng', 'interface/web/mail/lib/lang/tr_mail_spamfilter_list.lng', 'interface/web/admin/form/dbsync.tform.php', 'interface/web/tools/dns_import_tupa.php', 'interface/web/tools/templates/dns_import_tupa.htm', 'server/lib/classes/cron.d/100-monitor_mongodb.inc.php~', 'server/cron_daily.php', 'server/cron_daily.sh', 'server/lib/classes/mod_mail_base.inc.php', 'server/scripts/create_jailkit_chroot.sh', 'server/scripts/create_jailkit_programs.sh', 'server/scripts/create_jailkit_user.sh', 'server/conf/nginx_reverse_proxy_plugin.vhost.conf.master', 'interface/web/admin/lib/lang/it_software_package.lng', 'interface/web/admin/lib/lang/it_software_package_install.lng', 'interface/web/admin/lib/lang/it_software_package_list.lng', 'interface/web/admin/lib/lang/it_software_repo.lng', 'interface/web/admin/lib/lang/it_software_repo_list.lng', 'interface/web/admin/lib/lang/it_software_update_list.lng', 'interface/web/admin/form/iptables.tform.php', 'interface/web/admin/iptables_del.php', 'interface/web/admin/iptables_edit.php', 'interface/web/admin/iptables_list.php', 'interface/web/admin/lib/lang/ar_iptables.lng', 'interface/web/admin/lib/lang/ar_iptables_list.lng', 'interface/web/admin/lib/lang/bg_iptables.lng', 'interface/web/admin/lib/lang/bg_iptables_list.lng', 'interface/web/admin/lib/lang/br_iptables.lng', 'interface/web/admin/lib/lang/br_iptables_list.lng', 'interface/web/admin/lib/lang/ca_iptables.lng', 'interface/web/admin/lib/lang/ca_iptables_list.lng', 'interface/web/admin/lib/lang/cn_iptables.lng', 'interface/web/admin/lib/lang/cn_iptables_list.lng', 'interface/web/admin/lib/lang/cz_iptables.lng', 'interface/web/admin/lib/lang/cz_iptables_list.lng', 'interface/web/admin/lib/lang/de_iptables.lng', 'interface/web/admin/lib/lang/de_iptables_list.lng', 'interface/web/admin/lib/lang/dk_iptables.lng', 'interface/web/admin/lib/lang/dk_iptables_list.lng', 'interface/web/admin/lib/lang/el_iptables.lng', 'interface/web/admin/lib/lang/el_iptables_list.lng', 'interface/web/admin/lib/lang/en_iptables.lng', 'interface/web/admin/lib/lang/en_iptables_list.lng', 'interface/web/admin/lib/lang/es_iptables.lng', 'interface/web/admin/lib/lang/es_iptables_list.lng', 'interface/web/admin/lib/lang/fi_iptables.lng', 'interface/web/admin/lib/lang/fi_iptables_list.lng', 'interface/web/admin/lib/lang/fr_iptables.lng', 'interface/web/admin/lib/lang/fr_iptables_list.lng', 'interface/web/admin/lib/lang/hr_iptables.lng', 'interface/web/admin/lib/lang/hr_iptables_list.lng', 'interface/web/admin/lib/lang/hu_iptables.lng', 'interface/web/admin/lib/lang/hu_iptables_list.lng', 'interface/web/admin/lib/lang/id_iptables.lng', 'interface/web/admin/lib/lang/id_iptables_list.lng', 'interface/web/admin/lib/lang/it_iptables.lng', 'interface/web/admin/lib/lang/it_iptables_list.lng', 'interface/web/admin/lib/lang/ja_iptables.lng', 'interface/web/admin/lib/lang/ja_iptables_list.lng', 'interface/web/admin/lib/lang/jp_iptables.lng', 'interface/web/admin/lib/lang/jp_iptables_list.lng', 'interface/web/admin/lib/lang/nl_iptables.lng', 'interface/web/admin/lib/lang/nl_iptables_list.lng', 'interface/web/admin/lib/lang/pl_iptables.lng', 'interface/web/admin/lib/lang/pl_iptables_list.lng', 'interface/web/admin/lib/lang/pt_iptables.lng', 'interface/web/admin/lib/lang/pt_iptables_list.lng', 'interface/web/admin/lib/lang/ro_iptables.lng', 'interface/web/admin/lib/lang/ro_iptables_list.lng', 'interface/web/admin/lib/lang/ru_iptables.lng', 'interface/web/admin/lib/lang/ru_iptables_list.lng', 'interface/web/admin/lib/lang/se_iptables.lng', 'interface/web/admin/lib/lang/se_iptables_list.lng', 'interface/web/admin/lib/lang/sk_iptables.lng', 'interface/web/admin/lib/lang/sk_iptables_list.lng', 'interface/web/admin/lib/lang/tr_iptables.lng', 'interface/web/admin/lib/lang/tr_iptables_list.lng', 'interface/web/admin/list/iptables.list.php', 'interface/web/admin/templates/iptables_edit.htm', 'interface/web/admin/templates/iptables_list.htm', 'server/plugins-available/iptables_plugin.inc.php', 'interface/web/admin/form/tpl_default.tform.php', 'interface/web/admin/lib/lang/ar_tpl_default_admin.lng', 'interface/web/admin/lib/lang/bg_tpl_default_admin.lng', 'interface/web/admin/lib/lang/br_tpl_default_admin.lng', 'interface/web/admin/lib/lang/ca_tpl_default_admin.lng', 'interface/web/admin/lib/lang/cn_tpl_default_admin.lng', 'interface/web/admin/lib/lang/cz_tpl_default_admin.lng', 'interface/web/admin/lib/lang/de_tpl_default_admin.lng', 'interface/web/admin/lib/lang/dk_tpl_default_admin.lng', 'interface/web/admin/lib/lang/el_tpl_default_admin.lng', 'interface/web/admin/lib/lang/en_tpl_default_admin.lng', 'interface/web/admin/lib/lang/es_tpl_default_admin.lng', 'interface/web/admin/lib/lang/fi_tpl_default_admin.lng', 'interface/web/admin/lib/lang/fr_tpl_default_admin.lng', 'interface/web/admin/lib/lang/hr_tpl_default_admin.lng', 'interface/web/admin/lib/lang/hu_tpl_default_admin.lng', 'interface/web/admin/lib/lang/id_tpl_default_admin.lng', 'interface/web/admin/lib/lang/it_tpl_default_admin.lng', 'interface/web/admin/lib/lang/ja_tpl_default_admin.lng', 'interface/web/admin/lib/lang/jp_tpl_default_admin.lng', 'interface/web/admin/lib/lang/nl_tpl_default_admin.lng', 'interface/web/admin/lib/lang/pl_tpl_default_admin.lng', 'interface/web/admin/lib/lang/pt_tpl_default_admin.lng', 'interface/web/admin/lib/lang/ro_tpl_default_admin.lng', 'interface/web/admin/lib/lang/ru_tpl_default_admin.lng', 'interface/web/admin/lib/lang/se_tpl_default_admin.lng', 'interface/web/admin/lib/lang/sk_tpl_default_admin.lng', 'interface/web/admin/lib/lang/tr_tpl_default_admin.lng', 'interface/web/admin/lib/menu.d/tpl_default.menu.php', 'interface/web/admin/templates/tpl_default_basic.htm', 'interface/web/admin/tpl_default.php' ); $curpath = dirname(dirname(realpath(dirname(__FILE__)))); $c = 0; foreach($delete as $file) { if(strpos($file, '..') !== false) continue; // security! if(@is_file('/usr/local/ispconfig/' . $file) && !@is_file($curpath . '/' . $file)) { // be sure this is not a file contained in installation! @unlink('/usr/local/ispconfig/' . $file); ilog('Deleted obsolete file /usr/local/ispconfig/' . $file); $c++; } } ilog($c . ' obsolete files deleted.'); } } ispconfig3_install/install/patches/upd_0085.php0000775000000000000000000000363215114346020020425 0ustar rootrootlng('[INFO] Invalid cron line in file ' . $cron_file)); } elseif(preg_match('/^\w+=/', $line)) { if(preg_match('/\s/', $line)) { // warning line with env var and space! swriteln($inst->lng("\n" . '[WARNING] Cron line in file ' . $cron_file . ' contains environment variable.' . "\n")); } } elseif(!isset($fields[5])) { // invalid line (missing user) swriteln($inst->lng("\n" . '[WARNING] Cron line in file ' . $cron_file . ' misses user field.' . "\n")); } else { $check_filename = trim($fields[5]) . $check_suffix; if(substr($cron_file, -strlen($check_filename)) != $check_filename) { // warning user not equal to file name swriteln($inst->lng("\n" . '[WARNING] SUSPECT USER IN CRON FILE ' . $cron_file . '! CHECK CRON FILE FOR MALICIOUS ENTRIES!' . "\n")); } } } fclose($fp); } } } } ?> ispconfig3_install/install/patches/upd_0103.php0000775000000000000000000000337415152616670020434 0ustar rootrootdb->queryAllRecords($sql, $conf['server_id']); foreach($records as $rec) { $log_folder = 'log'; $site_logdir = $rec['document_root'].'/' . $log_folder; if(is_dir($site_logdir)) { $this->exec_safe("chgrp -R ? ?", $rec['system_group'], $site_logdir); $this->exec_safe("chmod -R o-rwx ?", $site_logdir); ilog('Updated log file permissions for '. $rec['domain']); } } } // Copy from server/lib/classes/system.inc.php, adapted to avoid $app public function exec_safe($cmd) { $args = func_get_args(); $arg_count = func_num_args(); if($arg_count != substr_count($cmd, '?') + 1) { trigger_error('Placeholder count not matching argument list.', E_USER_WARNING); return false; } if($arg_count > 1) { array_shift($args); $pos = 0; $a = 0; foreach($args as $value) { $a++; $pos = strpos($cmd, '?', $pos); if($pos === false) { break; } $value = escapeshellarg($value); $cmd = substr_replace($cmd, $value, $pos, 1); $pos += strlen($value); } } $last_exec_out = null; $last_exec_retcode = null; $ret = exec($cmd, $last_exec_out, $last_exec_retcode); ilog("safe_exec cmd: " . $cmd . " - return code: " . $last_exec_retcode, LOGLEVEL_DEBUG); return $ret; } } ispconfig3_install/install/patches/upd_0065.php0000775000000000000000000022514315273367323020445 0ustar rootroot ispconfig3_install/install/patches/upd_0088.php0000775000000000000000000000217115273367323020444 0ustar rootroot ispconfig3_install/install/patches/upd_0104.php0000775000000000000000000000213315267416152020425 0ustar rootrootdb->queryOneRecord('SELECT config FROM sys_ini WHERE sysini_id = 1'); if($tmp && isset($tmp['config']) && $tmp['config'] !== '') { $global_config = ini_to_array(stripslashes($tmp['config'])); if(isset($global_config['mail']) && !empty($global_config['mail']['admin_mail']) && (!isset($global_config['mail']['server_sender_mail']) || $global_config['mail']['server_sender_mail'] === '')) { $global_config['mail']['server_sender_mail'] = $global_config['mail']['admin_mail']; $server_config_str = array_to_ini($global_config); $inst->db->query('UPDATE sys_ini SET config = ? WHERE sysini_id = 1', $server_config_str); ilog('Migrated sys_ini mail.server_sender_mail from admin_mail'); } } } } ispconfig3_install/install/patches/upd_0001.php0000775000000000000000000000066315114346020020412 0ustar rootroot ispconfig3_install/install/patches/upd_0100.php0000775000000000000000000000150215152616670020420 0ustar rootroot Listen NameVirtualHost *: > ServerAdmin webmaster@localhost Alias /mail /var/www/ispconfig/mail SetHandler None Require all denied SetHandler None Require all denied # Do not expose theme version and meta files Require all denied DocumentRoot /var/www/ispconfig/ SuexecUserGroup ispconfig ispconfig Options -Indexes +FollowSymLinks +MultiViews +ExecCGI AllowOverride AuthConfig Indexes Limit Options FileInfo SetHandler fcgid-script FCGIWrapper /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter .php Require all granted Order allow,deny Allow from all IPCCommTimeout 7200 MaxRequestLen 15728640 DocumentRoot /usr/local/ispconfig/interface/web/ AssignUserId ispconfig ispconfig AddType application/x-httpd-php .php # php_admin_value open_basedir "/usr/local/ispconfig/interface:/usr/share:/tmp" Options +FollowSymLinks AllowOverride None Require all granted Order allow,deny Allow from all php_value magic_quotes_gpc 0 # ErrorLog /var/log/apache2/error.log # CustomLog /var/log/apache2/access.log combined ServerSignature Off LimitRequestBody 20971520 SecRuleEngine Off # SSL Configuration SSLEngine On SSLProtocol All -SSLv3 -TLSv1 -TLSv1.1 SSLProtocol All -SSLv2 -SSLv3 SSLCertificateFile /usr/local/ispconfig/interface/ssl/ispserver.crt SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/ispserver.key SSLCACertificateFile /usr/local/ispconfig/interface/ssl/ispserver.bundle SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 SSLHonorCipherOrder On SSLCompression Off SSLSessionTickets Off # ISPConfig 3.1 currently requires unsafe-line for both scripts and styles, as well as unsafe-eval Header always set Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; object-src 'none'; frame-ancestors 'self'" Header always set Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests" Header always set X-Content-Type-Options: nosniff Header always set X-Frame-Options: SAMEORIGIN Header always set Referrer-Policy: same-origin Header set X-XSS-Protection: "1; mode=block" Header always edit Set-Cookie (.*) "$1; HTTPOnly" Header always edit Set-Cookie (.*) "$1; Secure" = 2.4.7> Header setifempty Strict-Transport-Security "max-age=15768000" Header set Strict-Transport-Security "max-age=15768000" RequestHeader unset Proxy early # Redirect http to https ErrorDocument 400 "

Error 400 - trying to redirect

" ispconfig3_install/install/tpl/blacklist_helo.master0000775000000000000000000000304115114346020022006 0ustar rootroot# blacklist_helo - after permit_sasl, used to stop common spammers/misconfigurations # # This file can be used to block hostnames used in smtp HELO command which are known bad. # Occasionally you will run into legitimate mail servers which are misconfigured and end # up blocked here, so this is not enabled by default, but it is useful if you are prepared # to address those cases. # # See docs/extras/blacklist_helo.master from ispconfig source for a more complete example list. # # If you make changes here, also copy them to /usr/local/ispconfig/server/conf-custom/install/blacklist_helo.master, # so your changes are not overwritten with ispconfig updates. #/.*\.administrator$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.admin$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.adsl$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.arpa$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.dhcp$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.dns$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.domain$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. #/.*\.dynamic$/ REJECT HELO hostname is using a top level domain that does not exist. See RFC 2821 section 3.6. ispconfig3_install/install/tpl/postfix_3-3.conf.master0000775000000000000000000000024115114346020022030 0ustar rootroot# Postfix configuration for version 3.3 and up # 3.2 and earlier should not have this set when using reject_unverified_recipient enable_original_recipient = no ispconfig3_install/install/tpl/postfix_2-10.conf.master0000775000000000000000000000041015114346020022103 0ustar rootroot# Postfix configuration for version 2.10 and up smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination # This is supported in version 2.9, but lets not create another conf file for it address_verify_sender_ttl = 15686s ispconfig3_install/install/tpl/rspamd_neural_group.conf.master0000775000000000000000000000070415114346020024026 0ustar rootrootsymbols = { "NEURAL_SPAM_LONG" { weight = 1.0; # sample weight description = "Neural network spam (long)"; } "NEURAL_HAM_LONG" { weight = -2.0; # sample weight description = "Neural network ham (long)"; } "NEURAL_SPAM_SHORT" { weight = 0.5; # sample weight description = "Neural network spam (short)"; } "NEURAL_HAM_SHORT" { weight = -1.0; # sample weight description = "Neural network ham (short)"; } } ispconfig3_install/install/tpl/rspamd_mx_check.conf.master0000775000000000000000000000027415114346020023107 0ustar rootrootenabled = true; key_prefix = "rmx"; symbol_bad_mx = "MX_INVALID"; symbol_no_mx = "MX_MISSING"; symbol_good_mx = "MX_GOOD"; expire = 86400; expire_novalid = 7200; greylist_invalid = false; ispconfig3_install/install/tpl/opensuse_dovecot.conf.master0000775000000000000000000014623315114346020023352 0ustar rootroot## Dovecot configuration file # If you're in a hurry, see http://wiki.dovecot.org/QuickConfiguration # "dovecot -n" command gives a clean output of the changed settings. Use it # instead of copy&pasting this file when posting to the Dovecot mailing list. # '#' character and everything after it is treated as comments. Extra spaces # and tabs are ignored. If you want to use either of these explicitly, put the # value inside quotes, eg.: key = "# char and trailing whitespace " # Default values are shown for each setting, it's not required to uncomment # those. These are exceptions to this though: No sections (e.g. namespace {}) # or plugin settings are added by default, they're listed only as examples. # Paths are also just examples with the real defaults being based on configure # options. The paths listed here are for configure --prefix=/usr # --sysconfdir=/etc --localstatedir=/var --with-ssldir=/etc/ssl # Base directory where to store runtime data. #base_dir = /var/run/dovecot/ # Protocols we want to be serving: imap imaps pop3 pop3s managesieve # If you only want to use dovecot-auth, you can set this to "none". #protocols = imap imaps protocols = imap imaps pop3 pop3s # A space separated list of IP or host addresses where to listen in for # connections. "*" listens in all IPv4 interfaces. "[::]" listens in all IPv6 # interfaces. Use "*, [::]" for listening both IPv4 and IPv6. # # If you want to specify ports for each service, you will need to configure # these settings inside the protocol imap/pop3/managesieve { ... } section, # so you can specify different ports for IMAP/POP3/MANAGESIEVE. For example: # protocol imap { # listen = *:10143 # ssl_listen = *:10943 # .. # } # protocol pop3 { # listen = *:10100 # .. # } # protocol managesieve { # listen = *:12000 # .. # } #listen = * listen = *,[::] # Disable LOGIN command and all other plaintext authentications unless # SSL/TLS is used (LOGINDISABLED capability). Note that if the remote IP # matches the local IP (ie. you're connecting from the same computer), the # connection is considered secure and plaintext authentication is allowed. #disable_plaintext_auth = yes disable_plaintext_auth = no # Should all IMAP and POP3 processes be killed when Dovecot master process # shuts down. Setting this to "no" means that Dovecot can be upgraded without # forcing existing client connections to close (although that could also be # a problem if the upgrade is eg. because of a security fix). This however # means that after master process has died, the client processes can't write # to log files anymore. #shutdown_clients = yes shutdown_clients = yes ## ## Logging ## # Log file to use for error messages, instead of sending them to syslog. # /dev/stderr can be used to log into stderr. #log_path = # Log file to use for informational and debug messages. # Default is the same as log_path. #info_log_path = # Prefix for each line written to log file. % codes are in strftime(3) # format. #log_timestamp = "%b %d %H:%M:%S " log_timestamp = "%Y-%m-%d %H:%M:%S " # Syslog facility to use if you're logging to syslog. Usually if you don't # want to use "mail", you'll use local0..local7. Also other standard # facilities are supported. #syslog_facility = mail ## ## SSL settings ## # IP or host address where to listen in for SSL connections. Remember to also # add imaps and/or pop3s to protocols setting. Defaults to same as "listen" # setting if not specified. #ssl_listen = # SSL/TLS support: yes, no, required. ssl = yes # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. Included doc/mkcert.sh can be used to easily generate self-signed # certificate, just make sure to update the domains in dovecot-openssl.cnf #ssl_cert_file = /etc/ssl/certs/dovecot.pem #ssl_key_file = /etc/ssl/private/dovecot.pem ssl_cert_file = /etc/postfix/smtpd.cert ssl_key_file = /etc/postfix/smtpd.key # If key file is password protected, give the password here. Alternatively # give it when starting dovecot with -p parameter. Since this file is often # world-readable, you may want to place this setting instead to a different # root owned 0600 file by using !include_try . #ssl_key_password = # File containing trusted SSL certificate authorities. Set this only if you # intend to use ssl_verify_client_cert=yes. The CAfile should contain the # CA-certificate(s) followed by the matching CRL(s). #ssl_ca_file = # Request client to send a certificate. If you also want to require it, set # ssl_require_client_cert=yes in auth section. #ssl_verify_client_cert = no # Which field from certificate to use for username. commonName and # x500UniqueIdentifier are the usual choices. You'll also need to set # ssl_username_from_cert=yes. #ssl_cert_username_field = commonName # How often to regenerate the SSL parameters file. Generation is quite CPU # intensive operation. The value is in hours, 0 disables regeneration # entirely. #ssl_parameters_regenerate = 168 # SSL ciphers to use #ssl_cipher_list = ALL:!LOW:!SSLv2 # Show protocol level SSL errors. #verbose_ssl = no ## ## Login processes ## # # Directory where authentication process places authentication UNIX sockets # which login needs to be able to connect to. The sockets are created when # running as root, so you don't have to worry about permissions. Note that # everything in this directory is deleted when Dovecot is started. #login_dir = /var/run/dovecot/login # chroot login process to the login_dir. Only reason not to do this is if you # wish to run the whole Dovecot without roots. #login_chroot = yes # User to use for the login process. Create a completely new user for this, # and don't use it anywhere else. The user must also belong to a group where # only it has access, it's used to control access for authentication process. # Note that this user is NOT used to access mails. #login_user = dovecot # Set max. process size in megabytes. If you don't use # login_process_per_connection you might need to grow this. #login_process_size = 64 # Should each login be processed in it's own process (yes), or should one # login process be allowed to process multiple connections (no)? Yes is more # secure, espcially with SSL/TLS enabled. No is faster since there's no need # to create processes all the time. #login_process_per_connection = yes # Number of login processes to keep for listening new connections. #login_processes_count = 3 # Maximum number of login processes to create. The listening process count # usually stays at login_processes_count, but when multiple users start logging # in at the same time more extra processes are created. To prevent fork-bombing # we check only once in a second if new processes should be created - if all # of them are used at the time, we double their amount until the limit set by # this setting is reached. #login_max_processes_count = 128 # Maximum number of connections allowed per each login process. This setting # is used only if login_process_per_connection=no. Once the limit is reached, # the process notifies master so that it can create a new login process. #login_max_connections = 256 # Greeting message for clients. #login_greeting = Dovecot ready. # Space separated list of trusted network ranges. Connections from these # IPs are allowed to override their IP addresses and ports (for logging and # for authentication checks). disable_plaintext_auth is also ignored for # these networks. Typically you'd specify your IMAP proxy servers here. #login_trusted_networks = # Space-separated list of elements we want to log. The elements which have # a non-empty variable value are joined together to form a comma-separated # string. #login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c # Login log format. %$ contains login_log_format_elements string, %s contains # the data we want to log. #login_log_format = %$: %s ## ## Mailbox locations and namespaces ## # Location for users' mailboxes. This is the same as the old default_mail_env # setting. The default is empty, which means that Dovecot tries to find the # mailboxes automatically. This won't work if the user doesn't have any mail # yet, so you should explicitly tell Dovecot the full location. # # If you're using mbox, giving a path to the INBOX file (eg. /var/mail/%u) # isn't enough. You'll also need to tell Dovecot where the other mailboxes are # kept. This is called the "root mail directory", and it must be the first # path given in the mail_location setting. # # There are a few special variables you can use, eg.: # # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if there's no domain # %h - home directory # # See for full list. Some examples: # # mail_location = maildir:~/Maildir # mail_location = mbox:~/mail:INBOX=/var/mail/%u # mail_location = mbox:/var/mail/%d/%1n/%n:INDEX=/var/indexes/%d/%1n/%n # # # #mail_location = mail_location = maildir:/var/vmail/%d/%n/Maildir # If you need to set multiple mailbox locations or want to change default # namespace settings, you can do it by defining namespace sections. # # You can have private, shared and public namespaces. Private namespaces # are for user's personal mails. Shared namespaces are for accessing other # users' mailboxes that have been shared. Public namespaces are for shared # mailboxes that are managed by sysadmin. If you create any shared or public # namespaces you'll typically want to enable ACL plugin also, otherwise all # users can access all the shared mailboxes, assuming they have permissions # on filesystem level to do so. # # REMEMBER: If you add any namespaces, the default namespace must be added # explicitly, ie. mail_location does nothing unless you have a namespace # without a location setting. Default namespace is simply done by having a # namespace with empty prefix. #namespace private { # Hierarchy separator to use. You should use the same separator for all # namespaces or some clients get confused. '/' is usually a good one. # The default however depends on the underlying mail storage format. #separator = # Prefix required to access this namespace. This needs to be different for # all namespaces. For example "Public/". #prefix = # Physical location of the mailbox. This is in same format as # mail_location, which is also the default for it. #location = # There can be only one INBOX, and this setting defines which namespace # has it. #inbox = no # If namespace is hidden, it's not advertised to clients via NAMESPACE # extension. You'll most likely also want to set list=no. This is mostly # useful when converting from another server with different namespaces which # you want to deprecate but still keep working. For example you can create # hidden namespaces with prefixes "~/mail/", "~%u/mail/" and "mail/". #hidden = yes # Show the mailboxes under this namespace with LIST command. This makes the # namespace visible for clients that don't support NAMESPACE extension. # "children" value lists child mailboxes, but hides the namespace prefix. #list = yes # Namespace handles its own subscriptions. If set to "no", the parent # namespace handles them (empty prefix should always have this as "yes") #subscriptions = yes #} # Example shared namespace configuration #namespace shared { #separator = / # Mailboxes are visible under "shared/user@domain/" # %%n, %%d and %%u are expanded to the destination user. #prefix = shared/%%u/ # Mail location for other users' mailboxes. Note that %variables and ~/ # expands to the logged in user's data. %%n, %%d, %%u and %%h expand to the # destination user's data. #location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u # Use the default namespace for saving subscriptions. #subscriptions = no # List the shared/ namespace only if there are visible shared mailboxes. #list = children #} # System user and group used to access mails. If you use multiple, userdb # can override these by returning uid or gid fields. You can use either numbers # or names. #mail_uid = #mail_gid = # Group to enable temporarily for privileged operations. Currently this is # used only with INBOX when either its initial creation or dotlocking fails. # Typically this is set to "mail" to give access to /var/mail. #mail_privileged_group = # Grant access to these supplementary groups for mail processes. Typically # these are used to set up access to shared mailboxes. Note that it may be # dangerous to set these if users can create symlinks (e.g. if "mail" group is # set here, ln -s /var/mail ~/mail/var could allow a user to delete others' # mailboxes, or ln -s /secret/shared/box ~/mail/mybox would allow reading it). #mail_access_groups = # Allow full filesystem access to clients. There's no access checks other than # what the operating system does for the active UID/GID. It works with both # maildir and mboxes, allowing you to prefix mailboxes names with eg. /path/ # or ~user/. #mail_full_filesystem_access = no ## ## Mail processes ## # Enable mail process debugging. This can help you figure out why Dovecot # isn't finding your mails. #mail_debug = no # Log prefix for mail processes. See for list of # possible variables you can use. #mail_log_prefix = "%Us(%u): " # Max. number of lines a mail process is allowed to log per second before it's # throttled. 0 means unlimited. Typically there's no need to change this # unless you're using mail_log plugin, which may log a lot. This setting is # ignored while mail_debug=yes to avoid pointless throttling. #mail_log_max_lines_per_sec = 10 # Don't use mmap() at all. This is required if you store indexes to shared # filesystems (NFS or clustered filesystem). #mmap_disable = no # Rely on O_EXCL to work when creating dotlock files. NFS supports O_EXCL # since version 3, so this should be safe to use nowadays by default. #dotlock_use_excl = yes # Don't use fsync() or fdatasync() calls. This makes the performance better # at the cost of potential data loss if the server (or the file server) # goes down. #fsync_disable = no # Mail storage exists in NFS. Set this to yes to make Dovecot flush NFS caches # whenever needed. If you're using only a single mail server this isn't needed. #mail_nfs_storage = no # Mail index files also exist in NFS. Setting this to yes requires # mmap_disable=yes and fsync_disable=no. #mail_nfs_index = no # Locking method for index files. Alternatives are fcntl, flock and dotlock. # Dotlocking uses some tricks which may create more disk I/O than other locking # methods. NFS users: flock doesn't work, remember to change mmap_disable. #lock_method = fcntl # Drop all privileges before exec()ing the mail process. This is mostly # meant for debugging, otherwise you don't get core dumps. It could be a small # security risk if you use single UID for multiple users, as the users could # ptrace() each others processes then. #mail_drop_priv_before_exec = no # Show more verbose process titles (in ps). Currently shows user name and # IP address. Useful for seeing who are actually using the IMAP processes # (eg. shared mailboxes or if same uid is used for multiple accounts). #verbose_proctitle = no # Valid UID range for users, defaults to 500 and above. This is mostly # to make sure that users can't log in as daemons or other system users. # Note that denying root logins is hardcoded to dovecot binary and can't # be done even if first_valid_uid is set to 0. first_valid_uid = 5000 last_valid_uid = 5000 # Valid GID range for users, defaults to non-root/wheel. Users having # non-valid GID as primary group ID aren't allowed to log in. If user # belongs to supplementary groups with non-valid GIDs, those groups are # not set. first_valid_gid = 5000 last_valid_gid = 5000 # Maximum number of running mail processes. When this limit is reached, # new users aren't allowed to log in. #max_mail_processes = 512 # Set max. process size in megabytes. Most of the memory goes to mmap()ing # files, so it shouldn't harm much even if this limit is set pretty high. #mail_process_size = 256 # Maximum allowed length for mail keyword name. It's only forced when trying # to create new keywords. #mail_max_keyword_length = 50 # ':' separated list of directories under which chrooting is allowed for mail # processes (ie. /var/mail will allow chrooting to /var/mail/foo/bar too). # This setting doesn't affect login_chroot, mail_chroot or auth chroot # settings. If this setting is empty, "/./" in home dirs are ignored. # WARNING: Never add directories here which local users can modify, that # may lead to root exploit. Usually this should be done only if you don't # allow shell access for users. #valid_chroot_dirs = # Default chroot directory for mail processes. This can be overridden for # specific users in user database by giving /./ in user's home directory # (eg. /home/./user chroots into /home). Note that usually there is no real # need to do chrooting, Dovecot doesn't allow users to access files outside # their mail directory anyway. If your home directories are prefixed with # the chroot directory, append "/." to mail_chroot. #mail_chroot = ## ## Mailbox handling optimizations ## # The minimum number of mails in a mailbox before updates are done to cache # file. This allows optimizing Dovecot's behavior to do less disk writes at # the cost of more disk reads. #mail_cache_min_mail_count = 0 # When IDLE command is running, mailbox is checked once in a while to see if # there are any new mails or other changes. This setting defines the minimum # time in seconds to wait between those checks. Dovecot can also use dnotify, # inotify and kqueue to find out immediately when changes occur. #mailbox_idle_check_interval = 30 # Save mails with CR+LF instead of plain LF. This makes sending those mails # take less CPU, especially with sendfile() syscall with Linux and FreeBSD. # But it also creates a bit more disk I/O which may just make it slower. # Also note that if other software reads the mboxes/maildirs, they may handle # the extra CRs wrong and cause problems. #mail_save_crlf = no ## ## Maildir-specific settings ## # By default LIST command returns all entries in maildir beginning with a dot. # Enabling this option makes Dovecot return only entries which are directories. # This is done by stat()ing each entry, so it causes more disk I/O. # (For systems setting struct dirent->d_type, this check is free and it's # done always regardless of this setting) #maildir_stat_dirs = no # When copying a message, do it with hard links whenever possible. This makes # the performance much better, and it's unlikely to have any side effects. #maildir_copy_with_hardlinks = yes # When copying a message, try to preserve the base filename. Only if the # destination mailbox already contains the same name (ie. the mail is being # copied there twice), a new name is given. The destination filename check is # done only by looking at dovecot-uidlist file, so if something outside # Dovecot does similar filename preserving copies, you may run into problems. # NOTE: This setting requires maildir_copy_with_hardlinks = yes to work. #maildir_copy_preserve_filename = no # Assume Dovecot is the only MUA accessing Maildir: Scan cur/ directory only # when its mtime changes unexpectedly or when we can't find the mail otherwise. #maildir_very_dirty_syncs = no ## ## mbox-specific settings ## # Which locking methods to use for locking mbox. There are four available: # dotlock: Create .lock file. This is the oldest and most NFS-safe # solution. If you want to use /var/mail/ like directory, the users # will need write access to that directory. # dotlock_try: Same as dotlock, but if it fails because of permissions or # because there isn't enough disk space, just skip it. # fcntl : Use this if possible. Works with NFS too if lockd is used. # flock : May not exist in all systems. Doesn't work with NFS. # lockf : May not exist in all systems. Doesn't work with NFS. # # You can use multiple locking methods; if you do the order they're declared # in is important to avoid deadlocks if other MTAs/MUAs are using multiple # locking methods as well. Some operating systems don't allow using some of # them simultaneously. #mbox_read_locks = fcntl #mbox_write_locks = dotlock fcntl # Maximum time in seconds to wait for lock (all of them) before aborting. #mbox_lock_timeout = 300 # If dotlock exists but the mailbox isn't modified in any way, override the # lock file after this many seconds. #mbox_dotlock_change_timeout = 120 # When mbox changes unexpectedly we have to fully read it to find out what # changed. If the mbox is large this can take a long time. Since the change # is usually just a newly appended mail, it'd be faster to simply read the # new mails. If this setting is enabled, Dovecot does this but still safely # fallbacks to re-reading the whole mbox file whenever something in mbox isn't # how it's expected to be. The only real downside to this setting is that if # some other MUA changes message flags, Dovecot doesn't notice it immediately. # Note that a full sync is done with SELECT, EXAMINE, EXPUNGE and CHECK # commands. #mbox_dirty_syncs = yes # Like mbox_dirty_syncs, but don't do full syncs even with SELECT, EXAMINE, # EXPUNGE or CHECK commands. If this is set, mbox_dirty_syncs is ignored. #mbox_very_dirty_syncs = no # Delay writing mbox headers until doing a full write sync (EXPUNGE and CHECK # commands and when closing the mailbox). This is especially useful for POP3 # where clients often delete all mails. The downside is that our changes # aren't immediately visible to other MUAs. #mbox_lazy_writes = yes # If mbox size is smaller than this (in kilobytes), don't write index files. # If an index file already exists it's still read, just not updated. #mbox_min_index_size = 0 ## ## dbox-specific settings ## # Maximum dbox file size in kilobytes until it's rotated. #dbox_rotate_size = 2048 # Minimum dbox file size in kilobytes before it's rotated # (overrides dbox_rotate_days) #dbox_rotate_min_size = 16 # Maximum dbox file age in days until it's rotated. Day always begins from # midnight, so 1 = today, 2 = yesterday, etc. 0 = check disabled. #dbox_rotate_days = 0 ## ## IMAP specific settings ## protocol imap { # Login executable location. #login_executable = /usr/lib/dovecot/imap-login # IMAP executable location. Changing this allows you to execute other # binaries before the imap process is executed. # # This would write rawlogs into user's ~/dovecot.rawlog/, if it exists: # mail_executable = /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap # # # This would attach gdb into the imap process and write backtraces into # /tmp/gdbhelper.* files: # mail_executable = /usr/lib/dovecot/gdbhelper /usr/lib/dovecot/imap # #mail_executable = /usr/lib/dovecot/imap mail_executable = /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap # Maximum IMAP command line length in bytes. Some clients generate very long # command lines with huge mailboxes, so you may need to raise this if you get # "Too long argument" or "IMAP command line too large" errors often. #imap_max_line_length = 65536 # Maximum number of IMAP connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. #mail_max_userip_connections = 10 # Support for dynamically loadable plugins. mail_plugins is a space separated # list of plugins to load. #mail_plugins = mail_plugins = quota imap_quota mail_plugin_dir = /usr/lib/dovecot/modules/imap # IMAP logout format string: # %i - total number of bytes read from client # %o - total number of bytes sent to client #imap_logout_format = bytes=%i/%o # Override the IMAP CAPABILITY response. #imap_capability = # How many seconds to wait between "OK Still here" notifications when # client is IDLEing. #imap_idle_notify_interval = 120 # ID field names and values to send to clients. Using * as the value makes # Dovecot use the default value. The following fields have default values # currently: name, version, os, os-version, support-url, support-email. #imap_id_send = # ID fields sent by client to log. * means everything. #imap_id_log = # Workarounds for various client bugs: # delay-newmail: # Send EXISTS/RECENT new mail notifications only when replying to NOOP # and CHECK commands. Some clients ignore them otherwise, for example OSX # Mail ( (e.g. %Uf for the filename in uppercase) # # %v - Mailbox's IMAP UIDVALIDITY # %u - Mail's IMAP UID # %m - MD5 sum of the mailbox headers in hex (mbox only) # %f - filename (maildir only) # # If you want UIDL compatibility with other POP3 servers, use: # UW's ipop3d : %08Xv%08Xu # Courier : %f or %v-%u (both might be used simultaneosly) # Cyrus (<= 2.1.3) : %u # Cyrus (>= 2.1.4) : %v.%u # Dovecot v0.99.x : %v.%u # tpop3d : %Mf # # Note that Outlook 2003 seems to have problems with %v.%u format which was # Dovecot's default, so if you're building a new server it would be a good # idea to change this. %08Xu%08Xv should be pretty fail-safe. # #pop3_uidl_format = %08Xu%08Xv pop3_uidl_format = %08Xu%08Xv # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes # won't change those UIDLs. Currently this works only with Maildir. #pop3_save_uidl = no # POP3 logout format string: # %i - total number of bytes read from client # %o - total number of bytes sent to client # %t - number of TOP commands # %p - number of bytes sent to client as a result of TOP command # %r - number of RETR commands # %b - number of bytes sent to client as a result of RETR command # %d - number of deleted messages # %m - number of messages (before deletion) # %s - mailbox size in bytes (before deletion) #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s # Maximum number of POP3 connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. #mail_max_userip_connections = 3 # Support for dynamically loadable plugins. mail_plugins is a space separated # list of plugins to load. #mail_plugins = mail_plugins = quota mail_plugin_dir = /usr/lib/dovecot/modules/pop3 # Workarounds for various client bugs: # outlook-no-nuls: # Outlook and Outlook Express hang if mails contain NUL characters. # This setting replaces them with 0x80 character. # oe-ns-eoh: # Outlook Express and Netscape Mail breaks if end of headers-line is # missing. This option simply sends it if it's missing. # The list is space-separated. #pop3_client_workarounds = } ## ## ManageSieve specific settings ## protocol managesieve { # Login executable location. #login_executable = /usr/lib/dovecot/managesieve-login # ManageSieve executable location. See IMAP's mail_executable above for # examples how this could be changed. #mail_executable = /usr/lib/dovecot/managesieve # Maximum ManageSieve command line length in bytes. This setting is # directly borrowed from IMAP. But, since long command lines are very # unlikely with ManageSieve, changing this will not be very useful. #managesieve_max_line_length = 65536 # ManageSieve logout format string: # %i - total number of bytes read from client # %o - total number of bytes sent to client #managesieve_logout_format = bytes=%i/%o # If, for some inobvious reason, the sieve_storage remains unset, the # ManageSieve daemon uses the specification of the mail_location to find out # where to store the sieve files (see explaination in README.managesieve). # The example below, when uncommented, overrides any global mail_location # specification and stores all the scripts in '~/mail/sieve' if sieve_storage # is unset. However, you should always use the sieve_storage setting. # mail_location = mbox:~/mail # To fool ManageSieve clients that are focused on timesieved you can # specify the IMPLEMENTATION capability that the dovecot reports to clients # (default: "dovecot"). #managesieve_implementation_string = Cyrus timsieved v2.2.13 } ## ## LDA specific settings ## protocol lda { # Address to use when sending rejection mails. postmaster_address = postmaster@example.com # Hostname to use in various parts of sent mails, eg. in Message-Id. # Default is the system's real hostname. #hostname = # Support for dynamically loadable plugins. mail_plugins is a space separated # list of plugins to load. #mail_plugins = mail_plugins = sieve quota mail_plugin_dir = /usr/lib/dovecot/modules/lda # If user is over quota, return with temporary failure instead of # bouncing the mail. #quota_full_tempfail = no # Format to use for logging mail deliveries. You can use variables: # %$ - Delivery status message (e.g. "saved to INBOX") # %m - Message-ID # %s - Subject # %f - From address #deliver_log_format = msgid=%m: %$ # Binary to use for sending mails. #sendmail_path = /usr/lib/sendmail # Subject: header to use for rejection mails. You can use the same variables # as for rejection_reason below. #rejection_subject = Rejected: %s # Human readable error message for rejection mails. You can use variables: # %n = CRLF, %r = reason, %s = original subject, %t = recipient #rejection_reason = Your message to <%t> was automatically rejected:%n%r # UNIX socket path to master authentication server to find users. auth_socket_path = /var/run/dovecot/auth-master } ## ## Authentication processes ## # Executable location #auth_executable = /usr/lib/dovecot/dovecot-auth # Set max. process size in megabytes. #auth_process_size = 256 # Authentication cache size in kilobytes. 0 means it's disabled. # Note that bsdauth, PAM and vpopmail require cache_key to be set for caching # to be used. #auth_cache_size = 0 # Time to live in seconds for cached data. After this many seconds the cached # record is no longer used, *except* if the main database lookup returns # internal failure. We also try to handle password changes automatically: If # user's previous authentication was successful, but this one wasn't, the # cache isn't used. For now this works only with plaintext authentication. #auth_cache_ttl = 3600 # TTL for negative hits (user not found, password mismatch). # 0 disables caching them completely. #auth_cache_negative_ttl = 3600 # Space separated list of realms for SASL authentication mechanisms that need # them. You can leave it empty if you don't want to support multiple realms. # Many clients simply use the first one listed here, so keep the default realm # first. #auth_realms = # Default realm/domain to use if none was specified. This is used for both # SASL realms and appending @domain to username in plaintext logins. #auth_default_realm = # List of allowed characters in username. If the user-given username contains # a character not listed in here, the login automatically fails. This is just # an extra check to make sure user can't exploit any potential quote escaping # vulnerabilities with SQL/LDAP databases. If you want to allow all characters, # set this value to empty. #auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ # Username character translations before it's looked up from databases. The # value contains series of from -> to characters. For example "#@/@" means # that '#' and '/' characters are translated to '@'. #auth_username_translation = # Username formatting before it's looked up from databases. You can use # the standard variables here, eg. %Lu would lowercase the username, %n would # drop away the domain if it was given, or "%n-AT-%d" would change the '@' into # "-AT-". This translation is done after auth_username_translation changes. #auth_username_format = # If you want to allow master users to log in by specifying the master # username within the normal username string (ie. not using SASL mechanism's # support for it), you can specify the separator character here. The format # is then . UW-IMAP uses "*" as the # separator, so that could be a good choice. #auth_master_user_separator = # Username to use for users logging in with ANONYMOUS SASL mechanism #auth_anonymous_username = anonymous # Log unsuccessful authentication attempts and the reasons why they failed. #auth_verbose = no # Even more verbose logging for debugging purposes. Shows for example SQL # queries. #auth_debug = no # In case of password mismatches, log the passwords and used scheme so the # problem can be debugged. Enabling this also enables auth_debug. #auth_debug_passwords = no # Maximum number of dovecot-auth worker processes. They're used to execute # blocking passdb and userdb queries (eg. MySQL and PAM). They're # automatically created and destroyed as needed. #auth_worker_max_count = 30 # Host name to use in GSSAPI principal names. The default is to use the # name returned by gethostname(). Use "$ALL" to allow all keytab entries. #auth_gssapi_hostname = # Kerberos keytab to use for the GSSAPI mechanism. Will use the system # default (usually /etc/krb5.keytab) if not specified. #auth_krb5_keytab = # Do NTLM and GSS-SPNEGO authentication using Samba's winbind daemon and # ntlm_auth helper. #auth_use_winbind = no # Path for Samba's ntlm_auth helper binary. #auth_winbind_helper_path = /usr/bin/ntlm_auth # Number of seconds to delay before replying to failed authentications. #auth_failure_delay = 2 auth default { # Space separated list of wanted authentication mechanisms: # plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi otp skey # gss-spnego # NOTE: See also disable_plaintext_auth setting. mechanisms = plain login # # Password database is used to verify user's password (and nothing more). # You can have multiple passdbs and userdbs. This is useful if you want to # allow both system users (/etc/passwd) and virtual users to login without # duplicating the system users into virtual database. # # # # By adding master=yes setting inside a passdb you make the passdb a list # of "master users", who can log in as anyone else. Unless you're using PAM, # you probably still want the destination user to be looked up from passdb # that it really exists. This can be done by adding pass=yes setting to the # master passdb. # Users can be temporarily disabled by adding a passdb with deny=yes. # If the user is found from that database, authentication will fail. # The deny passdb should always be specified before others, so it gets # checked first. Here's an example: #passdb passwd-file { # File contains a list of usernames, one per line #args = /etc/dovecot.deny #deny = yes #} # PAM authentication. Preferred nowadays by most systems. # Note that PAM can only be used to verify if user's password is correct, # so it can't be used as userdb. If you don't want to use a separate user # database (passwd usually), you can use static userdb. # REMEMBER: You'll need /etc/pam.d/dovecot file created for PAM # authentication to actually work. passdb pam { # [session=yes] [setcred=yes] [failure_show_msg=yes] [max_requests=] # [cache_key=] [] # # session=yes makes Dovecot open and immediately close PAM session. Some # PAM plugins need this to work, such as pam_mkhomedir. # # setcred=yes makes Dovecot establish PAM credentials if some PAM plugins # need that. They aren't ever deleted though, so this isn't enabled by # default. # # max_requests specifies how many PAM lookups to do in one process before # recreating the process. The default is 100, because many PAM plugins # leak memory. # # cache_key can be used to enable authentication caching for PAM # (auth_cache_size also needs to be set). It isn't enabled by default # because PAM modules can do all kinds of checks besides checking password, # such as checking IP address. Dovecot can't know about these checks # without some help. cache_key is simply a list of variables (see # doc/wiki/Variables.txt) which must match for the cached data to be used. # Here are some examples: # %u - Username must match. Probably sufficient for most uses. # %u%r - Username and remote IP address must match. # %u%s - Username and service (ie. IMAP, POP3) must match. # # The service name can contain variables, for example %Ls expands to # pop3 or imap. # # Some examples: # args = session=yes %Ls # args = cache_key=%u dovecot #args = dovecot } # System users (NSS, /etc/passwd, or similiar) # In many systems nowadays this uses Name Service Switch, which is # configured in /etc/nsswitch.conf. #passdb passwd { # [blocking=yes] - See userdb passwd for explanation #args = #} # Shadow passwords for system users (NSS, /etc/shadow or similiar). # Deprecated by PAM nowadays. # #passdb shadow { # [blocking=yes] - See userdb passwd for explanation #args = #} # PAM-like authentication for OpenBSD. # #passdb bsdauth { # [cache_key=] - See cache_key in PAM for explanation. #args = #} # passwd-like file with specified location # #passdb passwd-file { # [scheme=] [username_format=] # #args = #} # checkpassword executable authentication # NOTE: You will probably want to use "userdb prefetch" with this. # #passdb checkpassword { # Path for checkpassword binary #args = #} # SQL database passdb sql { # Path for SQL configuration file, see doc/dovecot-sql-example.conf args = /etc/dovecot/dovecot-sql.conf } # LDAP database #passdb ldap { # Path for LDAP configuration file, see doc/dovecot-ldap-example.conf #args = #} # vpopmail authentication #passdb vpopmail { # [cache_key=] - See cache_key in PAM for explanation. # [quota_template=