aboutsummaryrefslogtreecommitdiffstats
path: root/install.php
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--install.php165
1 files changed, 165 insertions, 0 deletions
diff --git a/install.php b/install.php
new file mode 100644
index 0000000..f5ef25f
--- /dev/null
+++ b/install.php
@@ -0,0 +1,165 @@
+<?php
+/*
+Let's Encrypt for ISPConfig
+Copyright (c) 2015, Alexandre Alouit <alexandre.alouit@gmail.com>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+ list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+ this list of conditions and the following disclaimer in the documentation
+ and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+*/
+
+$backup_dir = "/var/backup/";
+$backup_file = date("Ymdhis")."-ISPConfig-letsencrypt.tar.gz";
+$backup_file2 = date("Ymdhis")."-cronjob.txt";
+
+if(!file_exists("/usr/local/ispconfig/server/lib/config.inc.php") OR !file_exists("/usr/local/ispconfig/server/lib/mysql_clientdb.conf")) {
+ echo "ERROR: Unable to load the ISPConfig defaut configuration files.\n";
+ exit;
+}
+
+require_once "/usr/local/ispconfig/server/lib/config.inc.php";
+require_once "/usr/local/ispconfig/server/lib/mysql_clientdb.conf";
+
+if($conf["app_version"] != "3.0.5.4p8") {
+ echo "ERROR: This version is unsupported.\n";
+ exit;
+}
+
+if(!file_exists($backup_dir)) {
+ echo "Backup directory not found.\n";
+ mkdir($backup_dir, 0700);
+}
+
+if(!file_exists($backup_dir)) {
+ echo "ERROR: Create it, and relaunch me!\n";
+ exit;
+}
+
+if(getcwd() != realpath(dirname(__FILE__))) {
+ echo "ERROR: Run me in current installer directory!\n";
+ exit;
+}
+
+echo "Create backup on " . $backup_dir . " directory\n";
+
+exec("/bin/tar -czf " . $backup_dir . $backup_file . " /usr/local/ispconfig");
+
+if(!file_exists($backup_dir . $backup_file )) {
+ echo "ERROR: There was a problem with the backup file.\n";
+ exit;
+}
+
+echo "Backup finished\n";
+
+if(!is_dir("/etc/letsencrypt")) {
+ echo "ERROR: Let's Encrypt directory ( /etc/letsencrypt/ ) is missing, install it corecctly!\n";
+ exit;
+}
+
+if(!is_file("/root/.local/share/letsencrypt/bin/letsencrypt")) {
+ echo "ERROR: Let's Encrypt ( /root/.local/share/letsencrypt/bin/letsencrypt ) is missing, install it corecctly!\n";
+ exit;
+}
+
+if(!is_file("/root/.local/share/letsencrypt/bin/letsencrypt-renewer")) {
+ echo "ERROR: Let's Encrypt ( /root/.local/share/letsencrypt/bin/letsencrypt-renewer ) is missing, install it corecctly!\n";
+ exit;
+}
+
+if(!is_file("/etc/letsencrypt/cli.ini")) {
+ echo "Let's Encrypt configuration file don't exist, create it.\n";
+ exec("cp ./cli.ini /etc/letsencrypt/cli.ini");
+} else {
+ echo "Let's Encrypt configuration file exist, patch it.\n";
+ exec("patch /etc/letsencrypt/cli.ini < ./cli.ini.patch");
+}
+
+if(!$buffer = mysql_connect($clientdb_host, $clientdb_user, $clientdb_password)) {
+ echo "ERROR: There was a problem with the MySQL connection.\n";
+ exit;
+}
+
+echo "Start MySQL update..\n";
+mysql_db_query($conf['db_database'], "ALTER TABLE `web_domain` ADD `ssl_letsencrypt` enum('n','y') NOT NULL DEFAULT 'n';", $buffer);
+
+if(is_file("/etc/apache2/apache2.conf")) {
+ echo "Configure Apache and reload it.\n";
+ if(is_file("/etc/apache2/conf-available/letsencrypt.conf")) {
+ exec("rm /etc/apache2/conf-available/letsencrypt.conf");
+ }
+ exec("cp ./apache.letsencrypt.conf /etc/apache2/conf-available/letsencrypt.conf");
+ exec("a2enmod headers");
+ exec("a2enconf letsencrypt");
+ exec("service apache2 reload");
+}
+
+if(is_file("/etc/nginx/nginx.conf")) {
+ echo "Patch Nginx and reload it.\n";
+ exec("patch /etc/nginx/nginx.conf < ./nginx.conf.patch");
+ exec("service nginx reload");
+}
+
+echo "Create backup cronjob on " . $backup_dir . " directory\n";
+exec("crontab -l >> " . $backup_dir . $backup_file2);
+if(!file_exists($backup_dir . $backup_file2 )) {
+ echo "ERROR: There was a problem with the cronjob backup file.\n";
+ exit;
+}
+
+exec("crontab -l", $output);
+
+if(!in_array("30 02 * * * /root/.local/share/letsencrypt/bin/letsencrypt-renewer >> /var/log/ispconfig/cron.log; done", $output)) {
+ echo "Add a cronjob for renewal certs\n";
+
+ $output[] = "30 02 * * * /root/.local/share/letsencrypt/bin/letsencrypt-renewer >> /var/log/ispconfig/cron.log; done";
+
+ exec("touch ./crontab.tmp");
+ if(!is_file("./crontab.tmp")) {
+ echo "ERROR: Unable to create temporary crontab file.\n";
+ exit;
+ }
+
+ foreach($output as $line) {
+ exec("echo '" . $line . "' >> ./crontab.tmp");
+ }
+
+ exec("cat ./crontab.tmp", $crontab);
+
+ if(empty(array_diff($output, $crontab))) {
+ exec("crontab ./crontab.tmp");
+ exec("rm ./crontab.tmp");
+ } else {
+ echo "ERROR: There was a problem with the cronjob temporary file.\n";
+ exit;
+ }
+} else {
+ echo "Renewer already present in crontab.\n";
+}
+
+echo "And finally, patch ISPConfig.\n";
+exec("cp ispconfig.patch /usr/local/ispconfig/ispconfig.patch");
+exec("cd /usr/local/ispconfig");
+exec("patch -p3 < ./ispconfig.patch");
+exec("rm ./ispconfig.patch");
+
+echo "Done my job. Enjoy!\n";
+exit;
+?>