mirror of
https://github.com/nextcloud/vm.git
synced 2025-10-26 11:27:32 +00:00
Bitwarden mailconfig (#1370)
Signed-off-by: enoch85 <github@hanssonit.se> Co-authored-by: Daniel Hansson <github@hanssonit.se>
This commit is contained in:
szaimen
GitHub
parent
44b33c7e0f
commit
dbd07a7dcd
235
apps/bitwarden-mailconfig.sh
Normal file
235
apps/bitwarden-mailconfig.sh
Normal file
@ -0,0 +1,235 @@
|
||||
#!/bin/bash
|
||||
|
||||
# T&M Hansson IT AB © - 2020, https://www.hanssonit.se/
|
||||
|
||||
# shellcheck disable=2034,2059
|
||||
true
|
||||
# shellcheck source=lib.sh
|
||||
. <(curl -sL https://raw.githubusercontent.com/nextcloud/vm/master/lib.sh)
|
||||
|
||||
# Check for errors + debug code and abort if something isn't right
|
||||
# 1 = ON
|
||||
# 0 = OFF
|
||||
DEBUG=0
|
||||
debug_mode
|
||||
|
||||
# Must be root
|
||||
root_check
|
||||
|
||||
# Check if Bitwarden is already installed
|
||||
print_text_in_color "$ICyan" "Checking if Bitwarden is already installed..."
|
||||
if is_docker_running
|
||||
then
|
||||
if docker ps -a --format '{{.Names}}' | grep -Eq "bitwarden";
|
||||
then
|
||||
if [ ! -d "$BITWARDEN_HOME"/bwdata ]
|
||||
then
|
||||
msg_box "It seems like 'Bitwarden' isn't installed in $BITWARDEN_HOME.\n\nYou cannot run this script."
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
msg_box "It seems like 'Bitwarden' isn't installed.\n\nYou cannot run this script."
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
msg_box "It seems like 'Bitwarden' isn't installed.\n\nYou cannot run this script."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
msg_box "This script lets you configure your mailserver settings for Bitwarden."
|
||||
if [[ "no" == $(ask_yes_or_no "Do you want to continue?") ]]
|
||||
then
|
||||
exit
|
||||
fi
|
||||
|
||||
# Insert globalSettings__mail__smtp__trustServer to global.override
|
||||
if ! grep -q "^globalSettings__mail__smtp__trustServer=" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
then
|
||||
echo "globalSettings__mail__smtp__trustServer=false" >> "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
fi
|
||||
|
||||
# Insert globalSettings__mail__smtp__startTls to global.override
|
||||
if ! grep -q "^globalSettings__mail__smtp__startTls=" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
then
|
||||
echo "globalSettings__mail__smtp__startTls=false" >> "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
fi
|
||||
|
||||
# Enter mailserver
|
||||
while true
|
||||
do
|
||||
MAIL_SERVER=$(whiptail --inputbox "Please enter the mailserver URL that you want to use.\nE.g. smtp.mail.de\nIf you don't want to change the mailserver, that is already configured inside the global.override.env-file, just leave the box empty." "$WT_HEIGHT" "$WT_WIDTH" 3>&1 1>&2 2>&3)
|
||||
if [[ "no" == $(ask_yes_or_no "Is this correct? $MAIL_SERVER") ]]
|
||||
then
|
||||
msg_box "OK, please try again."
|
||||
else
|
||||
break
|
||||
fi
|
||||
done
|
||||
|
||||
# Enter if you want to use ssl
|
||||
while true
|
||||
do
|
||||
PROTOCOL=$(whiptail --inputbox "Please type in the encryption protocol for your mailserver.\nThe available options are 'SSL', 'STARTTLS' or 'none'.\n\nIf you don't want to change the protocol setting, that are already configured inside the global.override.env-file, just leave the box empty." "$WT_HEIGHT" "$WT_WIDTH" 3>&1 1>&2 2>&3)
|
||||
if [[ "no" == $(ask_yes_or_no "Is this correct? $PROTOCOL") ]]
|
||||
then
|
||||
msg_box "OK, please try again."
|
||||
else
|
||||
if [ "$PROTOCOL" = "SSL" ]
|
||||
then
|
||||
DEFAULT_PORT=465
|
||||
break
|
||||
elif [ "$PROTOCOL" = "none" ]
|
||||
then
|
||||
DEFAULT_PORT=25
|
||||
break
|
||||
elif [ "$PROTOCOL" = "STARTTLS" ]
|
||||
then
|
||||
DEFAULT_PORT=587
|
||||
break
|
||||
elif [ "$PROTOCOL" = "" ]
|
||||
then
|
||||
DEFAULT_PORT=""
|
||||
break
|
||||
else
|
||||
msg_box "The answer wasn't correct. Please type in 'SSL', 'STARTTLS', 'none' or leave the inputbox empty."
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
# Enter Port or just use standard port (defined by usage of ssl)
|
||||
while true
|
||||
do
|
||||
SMTP_PORT=$(whiptail --inputbox "Please enter the port for your mailserver. The default port based on your protocol setting is $DEFAULT_PORT?\nPlease type that port into the inputbox, if you want to use it.\n\nIf you don't want to change the port, that is already configured inside the global.override.env-file, just leave the box empty." "$WT_HEIGHT" "$WT_WIDTH" 3>&1 1>&2 2>&3)
|
||||
if [[ "no" == $(ask_yes_or_no "Is this correct? $SMTP_PORT") ]]
|
||||
then
|
||||
msg_box "OK, please try again."
|
||||
else
|
||||
break
|
||||
fi
|
||||
done
|
||||
|
||||
# Enter your mail username
|
||||
while true
|
||||
do
|
||||
MAIL_USERNAME=$(whiptail --inputbox "Please enter the username for the login to your mail provider. E.g. mail@example.com\nPlease note: the domain used for your mail username and the mailserver domain have to match!\nIf you don't want to change the mail username that is already configured inside the global.override.env-file, just leave the box empty." "$WT_HEIGHT" "$WT_WIDTH" 3>&1 1>&2 2>&3)
|
||||
if [[ "no" == $(ask_yes_or_no "Is this correct? $MAIL_USERNAME") ]]
|
||||
then
|
||||
msg_box "OK, please try again."
|
||||
else
|
||||
break
|
||||
fi
|
||||
done
|
||||
|
||||
# Enter your mailuser password
|
||||
while true
|
||||
do
|
||||
MAIL_PASSWORD=$(whiptail --inputbox "Please enter the password for your mailserver user.\nIf you don't want to change the password, that is already configured inside the global.override.env-file, just leave the box empty." "$WT_HEIGHT" "$WT_WIDTH" 3>&1 1>&2 2>&3)
|
||||
if [[ "no" == $(ask_yes_or_no "Is this correct? $MAIL_PASSWORD") ]]
|
||||
then
|
||||
msg_box "OK, please try again."
|
||||
else
|
||||
break
|
||||
fi
|
||||
done
|
||||
|
||||
# Enter admin mailadresses
|
||||
while true
|
||||
do
|
||||
ADMIN_ACCOUNT=$(whiptail --inputbox "Please enter mailaccounts, that should have access to the Bitwarden admin-panel, reachable under https://your-bitwarden-domain/admin/.\nThey don't have to be registered Bitwarden accounts.\nTo make this setting work, your Bitwarden mailserver settings have to be correct.\nYou can enter just one e-mailaddress or enter more than one like so:\n'bitwarden@example.com,bitwarden2@example1.com,bitwarden3@example2.com'\nIf you want to keep the admin accounts that are already configured inside the global.override.env-file, just leave the box empty." "$WT_HEIGHT" "$WT_WIDTH" 3>&1 1>&2 2>&3)
|
||||
if [[ "no" == $(ask_yes_or_no "Is this correct? $MAIL_ACCOUNT") ]]
|
||||
then
|
||||
msg_box "OK, please try again."
|
||||
else
|
||||
break
|
||||
fi
|
||||
done
|
||||
|
||||
# Get results and store in a variable:
|
||||
RESULT="You will see now a list of all entered information that will get changed inside the global.override.env. Please check that everything seems correct.\n\n"
|
||||
if [ -n "$MAIL_SERVER" ]
|
||||
then
|
||||
RESULT+="Mailserver URL=$MAIL_SERVER\n"
|
||||
fi
|
||||
# SSL
|
||||
if [ -n "$PROTOCOL" ]
|
||||
then
|
||||
RESULT+="PROTOCOL=$PROTOCOL\n"
|
||||
fi
|
||||
# SMTP-Port
|
||||
if [ -n "$SMTP_PORT" ]
|
||||
then
|
||||
RESULT+="SMTP port=$SMTP_PORT\n"
|
||||
fi
|
||||
# Mail username
|
||||
if [ -n "$MAIL_USERNAME" ]
|
||||
then
|
||||
RESULT+="SMTP Username=$MAIL_USERNAME\n"
|
||||
fi
|
||||
# Mail password
|
||||
if [ -n "$MAIL_PASSWORD" ]
|
||||
then
|
||||
RESULT+="SMTP Password=$MAIL_PASSWORD\n"
|
||||
fi
|
||||
# Admin account(s)
|
||||
if [ -n "$ADMIN_ACCOUNT" ]
|
||||
then
|
||||
RESULT+="Admin account(s)=$ADMIN_ACCOUNT"
|
||||
fi
|
||||
|
||||
# Present what we gathered, if everything okay, write to files
|
||||
msg_box "$RESULT"
|
||||
if [[ "no" == $(ask_yes_or_no "Do you want to proceed?") ]]
|
||||
then
|
||||
exit
|
||||
fi
|
||||
|
||||
# Stop bitwarden
|
||||
systemctl stop bitwarden
|
||||
|
||||
# Write to files
|
||||
# mailserver
|
||||
if [ -n "$MAIL_SERVER" ]
|
||||
then
|
||||
check_command sed -i "s|^globalSettings__mail__smtp__host=.*|globalSettings__mail__smtp__host=$MAIL_SERVER|g" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
fi
|
||||
# SSL
|
||||
if [ "$PROTOCOL" = "SSL" ]
|
||||
then
|
||||
check_command sed -i "s|^globalSettings__mail__smtp__ssl=.*|globalSettings__mail__smtp__ssl=true|g" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
check_command sed -i "s|^globalSettings__mail__smtp__startTls=.*|globalSettings__mail__smtp__startTls=false|g" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
elif [ "$PROTOCOL" = "none" ]
|
||||
then
|
||||
check_command sed -i "s|^globalSettings__mail__smtp__ssl=.*|globalSettings__mail__smtp__ssl=false|g" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
check_command sed -i "s|^globalSettings__mail__smtp__startTls=.*|globalSettings__mail__smtp__startTls=false|g" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
elif [ "$PROTOCOL" = "STARTTLS" ]
|
||||
then
|
||||
check_command sed -i "s|^globalSettings__mail__smtp__startTls=.*|globalSettings__mail__smtp__startTls=true|g" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
check_command sed -i "s|^globalSettings__mail__smtp__ssl=.*|globalSettings__mail__smtp__ssl=false|g" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
fi
|
||||
# SMTP-Port
|
||||
if [ -n "$SMTP_PORT" ]
|
||||
then
|
||||
check_command sed -i "s|^globalSettings__mail__smtp__port=.*|globalSettings__mail__smtp__port=$SMTP_PORT|g" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
fi
|
||||
# Mail username
|
||||
if [ -n "$MAIL_USERNAME" ]
|
||||
then
|
||||
check_command sed -i "s|^globalSettings__mail__smtp__username=.*|globalSettings__mail__smtp__username=$MAIL_USERNAME|g" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
fi
|
||||
# Mail password
|
||||
if [ -n "$MAIL_PASSWORD" ]
|
||||
then
|
||||
check_command sed -i "s|^globalSettings__mail__smtp__password=.*|globalSettings__mail__smtp__password=$MAIL_PASSWORD|g" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
fi
|
||||
# Admin account(s)
|
||||
if [ -n "$ADMIN_ACCOUNT" ]
|
||||
then
|
||||
check_command sed -i "s|^adminSettings__admins=.*|adminSettings__admins=$ADMIN_ACCOUNT|g" "$BITWARDEN_HOME"/bwdata/env/global.override.env
|
||||
fi
|
||||
|
||||
# Start Bitwarden
|
||||
systemctl start bitwarden
|
||||
msg_box "Your Bitwarden mailserver settings should be successfully changed by now.
|
||||
|
||||
If you experience any issues, please report them to $ISSUES"
|
||||
exit
|
||||
@ -196,6 +196,7 @@ a2enmod proxy_wstunnel
|
||||
a2enmod proxy_http
|
||||
a2enmod ssl
|
||||
a2enmod headers
|
||||
a2enmod remoteip
|
||||
|
||||
if [ -f "$HTTPS_CONF" ]
|
||||
then
|
||||
@ -215,7 +216,7 @@ then
|
||||
SSLCertificateFile $CERTFILES/$SUBDOMAIN/cert.pem
|
||||
SSLCertificateKeyFile $CERTFILES/$SUBDOMAIN/privkey.pem
|
||||
SSLOpenSSLConfCmd DHParameters $DHPARAMS_SUB
|
||||
|
||||
|
||||
SSLProtocol TLSv1.2
|
||||
SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
|
||||
LogLevel warn
|
||||
@ -233,7 +234,13 @@ then
|
||||
ProxyPassMatch (.*)(\/websocket)$ "ws://127.0.0.1:5178/$1$2"
|
||||
ProxyPass / "http://127.0.0.1:5178/"
|
||||
ProxyPassReverse / "http://127.0.0.1:5178/"
|
||||
|
||||
# Extra (remote) headers
|
||||
# RemoteIPHeader X-Forwarded-For
|
||||
# RemoteIPHeader X-Real-IP
|
||||
# RemoteIPHeader X-Forwarded-Proto
|
||||
# Header set X-XSS-Protection "1; mode=block"
|
||||
# Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
|
||||
# Header set X-Content-Type-Options nosniff
|
||||
<Location />
|
||||
ProxyPassReverse /
|
||||
</Location>
|
||||
|
||||
@ -18,14 +18,13 @@ root_check
|
||||
|
||||
# Install Apps
|
||||
choice=$(whiptail --title "Which apps do you want to install?" --checklist "Automatically configure and install selected apps\nSelect by pressing the spacebar\nYou can view this menu later by running 'sudo bash $SCRIPTS/menu.sh'" "$WT_HEIGHT" "$WT_WIDTH" 4 \
|
||||
"Bitwarden" "(External password manager)" OFF \
|
||||
"Fail2ban " "(Extra Bruteforce protection)" OFF \
|
||||
"Fail2ban-Statuscheck" "(Check status of banned IPs in iptables and Fail2ban)" OFF \
|
||||
"Adminer" "(PostgreSQL GUI)" OFF \
|
||||
"Netdata" "(Real-time server monitoring)" OFF \
|
||||
"Collabora" "(Online editing [2GB RAM])" OFF \
|
||||
"OnlyOffice" "(Online editing [2GB RAM])" OFF \
|
||||
"Bitwarden " "(External password manager)" OFF \
|
||||
"Bitwarden-Registration" "(Enable or disable public user registration for Bitwarden)" OFF \
|
||||
"FullTextSearch" "(Elasticsearch for Nextcloud [2GB RAM])" OFF \
|
||||
"PreviewGenerator" "(Pre-generate previews)" OFF \
|
||||
"LDAP" "(Windows Active directory)" OFF \
|
||||
@ -34,6 +33,11 @@ choice=$(whiptail --title "Which apps do you want to install?" --checklist "Auto
|
||||
"SMB-mount" "(Connect to SMB-shares from your local network)" OFF 3>&1 1>&2 2>&3)
|
||||
|
||||
case "$choice" in
|
||||
*"Bitwarden "*)
|
||||
clear
|
||||
print_text_in_color "$ICyan" "Downloading the Bitwarden script..."
|
||||
run_script MENU bitwarden_menu
|
||||
;;&
|
||||
*"Fail2ban "*)
|
||||
clear
|
||||
print_text_in_color "$ICyan" "Downloading Fail2ban.sh..."
|
||||
@ -69,15 +73,6 @@ case "$choice" in
|
||||
print_text_in_color "$ICyan" "Downloading Collabora.sh..."
|
||||
run_script APP collabora
|
||||
;;&
|
||||
*"Bitwarden "*)
|
||||
clear
|
||||
print_text_in_color "$ICyan" "Downloading Bitwarden.sh..."
|
||||
run_script APP tmbitwarden
|
||||
;;&
|
||||
*"Bitwarden-Registration"*)
|
||||
clear
|
||||
run_script APP bitwarden-registration
|
||||
;;&
|
||||
*"FullTextSearch"*)
|
||||
clear
|
||||
print_text_in_color "$ICyan" "Downloading FullTextSearch.sh..."
|
||||
|
||||
43
menu/bitwarden_menu.sh
Normal file
43
menu/bitwarden_menu.sh
Normal file
@ -0,0 +1,43 @@
|
||||
#!/bin/bash
|
||||
|
||||
# T&M Hansson IT AB © - 2020, https://www.hanssonit.se/
|
||||
|
||||
# shellcheck disable=2034,2059
|
||||
true
|
||||
# shellcheck source=lib.sh
|
||||
. <(curl -sL https://raw.githubusercontent.com/nextcloud/vm/master/lib.sh)
|
||||
|
||||
# Check for errors + debug code and abort if something isn't right
|
||||
# 1 = ON
|
||||
# 0 = OFF
|
||||
DEBUG=0
|
||||
debug_mode
|
||||
|
||||
# Must be root
|
||||
root_check
|
||||
|
||||
choice=$(whiptail --title "Bitwarden" --checklist "Automatically configure and install the Bitwarden or configure some aspects of it.\nSelect by pressing the spacebar\nYou can view this menu later by running 'sudo bash $SCRIPTS/menu.sh'" "$WT_HEIGHT" "$WT_WIDTH" 4 \
|
||||
"Bitwarden " "(External password manager [4GB RAM] - subdomain required)" OFF \
|
||||
"Bitwarden-Registration" "(Enable or disable public user registration for Bitwarden)" OFF \
|
||||
"Bitwarden-Mail-Configuration" "(Configure the mailserver settings for Bitwarden)" OFF 3>&1 1>&2 2>&3)
|
||||
|
||||
case "$choice" in
|
||||
*"Bitwarden "*)
|
||||
clear
|
||||
print_text_in_color "$ICyan" "Downloading the Bitwarden script..."
|
||||
run_script APP tmbitwarden
|
||||
;;&
|
||||
*"Bitwarden-Registration"*)
|
||||
clear
|
||||
print_text_in_color "$ICyan" "Downloading the Bitwarden-registration script..."
|
||||
run_script APP bitwarden-registration
|
||||
;;&
|
||||
*"Bitwarden-Mail-Configuration"*)
|
||||
clear
|
||||
print_text_in_color "$ICyan" "Downloading the Bitwarden-Mailconfig script..."
|
||||
run_script APP bitwarden-mailconfig
|
||||
;;&
|
||||
*)
|
||||
;;
|
||||
esac
|
||||
exit
|
||||
Loading…
Reference in New Issue
Block a user