Update nodemgmt-scripts.sh

This commit is contained in:
2019-02-03 19:24:19 -06:00
parent 3e6bbbfb2b
commit 3fd45e1574

View File

@@ -15,7 +15,6 @@ source /opt/idssys/defaults/default.inc
source /opt/idssys/settings/nodemgmt.conf source /opt/idssys/settings/nodemgmt.conf
source /opt/idssys/nodemgmt/defaults.inc source /opt/idssys/nodemgmt/defaults.inc
# ========================================================= # # ========================================================= #
STATUS() { STATUS() {
@@ -60,78 +59,71 @@ STATUS() {
echo -e "${idsCL[Yellow]}-------------------------------------------------------------${idsCL[Default]}" echo -e "${idsCL[Yellow]}-------------------------------------------------------------${idsCL[Default]}"
echo "" echo ""
} }
NEWCERT(){
echo -e "${idsCL[LightGreen]}Requesting Certificate for '${idsCL[Yellow]}${2}${idsCL[LightGreen]}'...${idsCL[Default]}"
echo ""
do_with_root $CERT_DAEMON certonly --webroot -w /var/www/html -d $2
do_with_root chown -R root:letsencrypt /etc/letsencrypt
do_with_root chmod -R 6775 /etc/letsencrypt
echo -e "${idsCL[LightYellow]}Waiting for certifcate replication between the nodes...${idsCL[Default]}"
echo ""
sleep 20
${FOLDER}/nodemgmt-scripts.sh service nginx reload
}
case "$1" in CERTRENEW(){
echo -e "${idsCL[LightGreen]}Renewing Certificates...${idsCL[Default]}"
do_with_root $CERT_DAEMON renew --webroot -w /var/www/html 2>&1 | tee /opt/idssys/nodemgmt/cert-renewal.lastrun
do_with_root chown -R root:letsencrypt /etc/letsencrypt 2>&1 | tee -a /opt/idssys/nodemgmt/cert-renewal.lastrun
do_with_root chmod -R 6775 /etc/letsencrypt 2>&1 | tee -a /opt/idssys/nodemgmt/cert-renewal.lastrun
echo -e "${idsCL${idsCL[LightYellow]}}Waiting for certifcate replication between the nodes...${idsCL[Default]}"
echo ""
sleep 20
${FOLDER}/nodemgmt-scripts.sh service nginx reload 2>&1 | tee -a /opt/idssys/nodemgmt/cert-renewal.lastrun
}
NIGHTLYRENEW(){
rm -f /opt/idssys/nodemgmt/cert-renewal.lastrun
do_with_root $CERT_DAEMON renew --webroot -w /var/www/html &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
do_with_root chown -R root:letsencrypt /etc/letsencrypt &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
do_with_root chmod -R 6775 /etc/letsencrypt &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
sleep 20
${FOLDER}/nodemgmt-scripts.sh service nginx reload &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
}
newcert) DELSITE(){
echo -e "${idsCL[LightGreen]}Requesting Certificate for '${idsCL[Yellow]}${2}${idsCL[LightGreen]}'...${idsCL[Default]}" DEL_SITE=${2}
echo "" echo -e "${idsCL[LightRed]}Deleting site '${idsCL[Red]}${DEL_SITE}${idsCL[LightRed]}'...${idsCL[Default]}"
do_with_root $CERT_DAEMON certonly --webroot -w /var/www/html -d $2 echo ""
do_with_root chown -R root:letsencrypt /etc/letsencrypt
do_with_root chmod -R 6775 /etc/letsencrypt
echo -e "${idsCL[LightYellow]}Waiting for certifcate replication between the nodes...${idsCL[Default]}"
echo ""
sleep 20
${FOLDER}/nodemgmt-scripts.sh service nginx reload
exit 0
;;
certrenew)
echo -e "${idsCL[LightGreen]}Renewing Certificates...${idsCL[Default]}"
do_with_root $CERT_DAEMON renew --webroot -w /var/www/html 2>&1 | tee /opt/idssys/nodemgmt/cert-renewal.lastrun
do_with_root chown -R root:letsencrypt /etc/letsencrypt 2>&1 | tee -a /opt/idssys/nodemgmt/cert-renewal.lastrun
do_with_root chmod -R 6775 /etc/letsencrypt 2>&1 | tee -a /opt/idssys/nodemgmt/cert-renewal.lastrun
echo -e "${idsCL${idsCL[LightYellow]}}Waiting for certifcate replication between the nodes...${idsCL[Default]}"
echo ""
sleep 20
${FOLDER}/nodemgmt-scripts.sh service nginx reload 2>&1 | tee -a /opt/idssys/nodemgmt/cert-renewal.lastrun
exit 0
;;
nightlyrenew)
rm -f /opt/idssys/nodemgmt/cert-renewal.lastrun
do_with_root $CERT_DAEMON renew --webroot -w /var/www/html &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
do_with_root chown -R root:letsencrypt /etc/letsencrypt &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
do_with_root chmod -R 6775 /etc/letsencrypt &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
sleep 20
${FOLDER}/nodemgmt-scripts.sh service nginx reload &>> /opt/idssys/nodemgmt/cert-renewal.lastrun
exit 0
;;
delsite) echo -e "${idsCL[LightRed]}[[Removing Files and Folders]]${idsCL[Default]}"
DEL_SITE=${2} echo -e "${idsCL[LightRed]}-------------------------------------------${idsCL[Default]}"
echo -e "${idsCL[LightRed]}Deleting site '${idsCL[Red]}${DEL_SITE}${idsCL[LightRed]}'...${idsCL[Default]}"
echo "" nid=1
for nip in "${NODE_HOSTS[@]}"
echo -e "${idsCL[LightRed]}[[Removing Files and Folders]]${idsCL[Default]}" do
echo -e "${idsCL[LightRed]}-------------------------------------------${idsCL[Default]}" if [[ $(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1) == *"${nip}"* ]]; then
nip='localhost '
nid=1 NCMD=''
for nip in "${NODE_HOSTS[@]}" else
do NCMD="ssh root@${nip}"
if [[ $(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1) == *"${nip}"* ]]; then fi
nip='localhost ' echo -en "Removing from iDS-Node${nid} ($nip)... ${idsCL[Default]}"
NCMD='' ${NCMD} rm -f /etc/nginx/sites-available/${DEL_SITE}.conf
else ${NCMD} rm -f /etc/nginx/sites-enabled/${DEL_SITE}.conf
NCMD="ssh root@${nip}" ${NCMD} rm -rf /var/www/${DEL_SITE}
fi ${NCMD} rm -rf /etc/letsencrypt/archive/${DEL_SITE}
echo -en "Removing from iDS-Node${nid} ($nip)... ${idsCL[Default]}" ${NCMD} rm -rf /etc/letsencrypt/live/${DEL_SITE}
${NCMD} rm -f /etc/nginx/sites-available/${DEL_SITE}.conf ${NCMD} rm -f /etc/letsencrypt/renewal/${DEL_SITE}.conf
${NCMD} rm -f /etc/nginx/sites-enabled/${DEL_SITE}.conf echo -e "${idsCL[Green]}OK${idsCL[Default]}"
${NCMD} rm -rf /var/www/${DEL_SITE} nid=`expr $nid + 1`
${NCMD} rm -rf /etc/letsencrypt/archive/${DEL_SITE} done
${NCMD} rm -rf /etc/letsencrypt/live/${DEL_SITE} echo ""
${NCMD} rm -f /etc/letsencrypt/renewal/${DEL_SITE}.conf ${FOLDER}/nodemgmt-scripts.sh service nginx reload
echo -e "${idsCL[Green]}OK${idsCL[Default]}" echo -e "${idsCL[LightRed]}Site has been deleted.${idsCL[Default]}"
nid=`expr $nid + 1` }
done
echo "" NEWSITE(){
${FOLDER}/nodemgmt-scripts.sh service nginx reload
echo -e "${idsCL[LightRed]}Site has been deleted.${idsCL[Default]}"
;;
newsite)
while [ $# -gt 0 ]; do while [ $# -gt 0 ]; do
case "$1" in case "$1" in
-site) NEW_SITE=${2};; -site) NEW_SITE=${2};;
@@ -287,97 +279,88 @@ case "$1" in
printf "%-${width}s- %s\n" " -port {host port}" "(required if type set to proxy)" printf "%-${width}s- %s\n" " -port {host port}" "(required if type set to proxy)"
echo "}" echo "}"
exit 1 exit 1
fi fi
exit 1 }
;;
STATUS-CHECK(){
update) if [ "${STATUS_CHECK_EMAIL}" != "" ]; then
exit 0 if [ ! -z ${LOCAL_SERVICES+x} ]; then
;; lip=$(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1)
for srvc in "${LOCAL_SERVICES[@]}"
status) do
STATUS if [ $(pgrep ${srvc} | wc -l) -lt "1" ]; then
;; echo "${NM_SERVICES[${srvc}]} is down" | mail -s "${NODE_HOSTNAME}-${nip}" ${STATUS_CHECK_EMAIL}
touch ${FOLDER}/localhost-${srvc}.down
status-check) elif [ -f ${FOLDER}/localhost-${srvc}.down ]; then
if [ "${STATUS_CHECK_EMAIL}" != "" ]; then echo "${NM_SERVICES[${srvc}]} is back UP!" | mail -s "${NODE_HOSTNAME}-${nip}" ${STATUS_CHECK_EMAIL}
if [ ! -z ${LOCAL_SERVICES+x} ]; then rm -f ${FOLDER}/localhost-${srvc}.down
lip=$(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1) fi
for srvc in "${LOCAL_SERVICES[@]}" done
fi
if [ -z ${LOCAL_SERVICES+x} ] || [ "${2}" = "all" ]; then
nid=1
for nip in "${NODE_HOSTS[@]}"
do
if [[ $(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1) == *"${nip}"* ]]; then NCMD=''
else NCMD="ssh root@${nip}"
fi
for srvc in "${NODE_SERVICES[@]}"
do do
if [ $(pgrep ${srvc} | wc -l) -lt "1" ]; then if [ $(${NCMD} pgrep ${srvc} | wc -l) -lt "1" ]; then
echo "${NM_SERVICES[${srvc}]} is down" | mail -s "${NODE_HOSTNAME}-${nip}" ${STATUS_CHECK_EMAIL} echo "${NM_SERVICES[${srvc}]} is down" | mail -s "iDS-Node${nid}-${nip}" ${STATUS_CHECK_EMAIL}
touch ${FOLDER}/localhost-${srvc}.down touch ${FOLDER}/${nip}-${srvc}.down
elif [ -f ${FOLDER}/localhost-${srvc}.down ]; then elif [ -f ${FOLDER}/${nip}-${srvc}.down ]; then
echo "${NM_SERVICES[${srvc}]} is back UP!" | mail -s "${NODE_HOSTNAME}-${nip}" ${STATUS_CHECK_EMAIL} echo "${NM_SERVICES[${srvc}]} is back UP!" | mail -s "iDS-Node${nid}-${nip}" ${STATUS_CHECK_EMAIL}
rm -f ${FOLDER}/localhost-${srvc}.down rm -f ${FOLDER}/${nip}-${srvc}.down
fi fi
done done
fi nid=`expr $nid + 1`
if [ -z ${LOCAL_SERVICES+x} ] || [ "${2}" = "all" ]; then done
nid=1
for nip in "${NODE_HOSTS[@]}"
do
if [[ $(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1) == *"${nip}"* ]]; then NCMD=''
else NCMD="ssh root@${nip}"
fi
for srvc in "${NODE_SERVICES[@]}"
do
if [ $(${NCMD} pgrep ${srvc} | wc -l) -lt "1" ]; then
echo "${NM_SERVICES[${srvc}]} is down" | mail -s "iDS-Node${nid}-${nip}" ${STATUS_CHECK_EMAIL}
touch ${FOLDER}/${nip}-${srvc}.down
elif [ -f ${FOLDER}/${nip}-${srvc}.down ]; then
echo "${NM_SERVICES[${srvc}]} is back UP!" | mail -s "iDS-Node${nid}-${nip}" ${STATUS_CHECK_EMAIL}
rm -f ${FOLDER}/${nip}-${srvc}.down
fi
done
nid=`expr $nid + 1`
done
fi
fi fi
;; fi
}
set-permissions)
if [ "${2}" != "" ]; then SET-PERMISSIONS(){
NEW_SITE=${2} if [ "${2}" != "" ]; then
echo -e "${idsCL[Yellow]}Setting new site folder permissions for (/var/www/${NEW_SITE})${idsCL[Default]}" NEW_SITE=${2}
echo -e "${idsCL[Yellow]}Setting new site folder permissions for (/var/www/${NEW_SITE})${idsCL[Default]}"
fi
nid=1
for nip in "${NODE_HOSTS[@]}"
do
if [[ $(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1) == *"${nip}"* ]]; then
nip='localhost '
NCMD=''
else
NCMD="ssh root@${nip}"
fi fi
nid=1 if [ "${NEW_SITE}" != "" ]; then
for nip in "${NODE_HOSTS[@]}" echo -en "${idsCL[Cyan]}iDS-Node${nid} (${nip}) ${idsCL[Default]}"
do ${NCMD} chown -R www-data:www-data /var/www/$NEW_SITE
if [[ $(/sbin/ip -o -4 addr list ens192 | awk '{print $4}' | cut -d/ -f1) == *"${nip}"* ]]; then ${NCMD} chmod -R 7775 /var/www/$NEW_SITE
nip='localhost ' echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
NCMD='' else
else echo -e "${idsCL[Yellow]}Setting folder permissions for iDS-Node${nid} (${nip})${idsCL[Default]}"
NCMD="ssh root@${nip}" echo -en "${idsCL[Cyan]}LetsEncrypt Certs ${idsCL[Default]}"
fi ${NCMD} chown -R root:letsencrypt /etc/letsencrypt
if [ "${NEW_SITE}" != "" ]; then ${NCMD} chmod -R 6775 /etc/letsencrypt
echo -en "${idsCL[Cyan]}iDS-Node${nid} (${nip}) ${idsCL[Default]}" echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
${NCMD} chown -R www-data:www-data /var/www/$NEW_SITE echo -en "${idsCL[Cyan]}Webserver folders ${idsCL[Default]}"
${NCMD} chmod -R 7775 /var/www/$NEW_SITE ${NCMD} chown -R www-data:www-data /var/www
echo -e "${idsCL[Green]}Complete${idsCL[Default]}" ${NCMD} chmod -R 7775 /var/www
else echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
echo -e "${idsCL[Yellow]}Setting folder permissions for iDS-Node${nid} (${nip})${idsCL[Default]}" echo -en "${idsCL[Cyan]}Gitea Folder ${idsCL[Default]}"
echo -en "${idsCL[Cyan]}LetsEncrypt Certs ${idsCL[Default]}" ${NCMD} chown -R git:git /var/lib/gitea
${NCMD} chown -R root:letsencrypt /etc/letsencrypt ${NCMD} chmod -R 750 /var/lib/gitea
${NCMD} chmod -R 6775 /etc/letsencrypt echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
echo -e "${idsCL[Green]}Complete${idsCL[Default]}" echo ""
echo -en "${idsCL[Cyan]}Webserver folders ${idsCL[Default]}" fi
${NCMD} chown -R www-data:www-data /var/www nid=`expr $nid + 1`
${NCMD} chmod -R 7775 /var/www done
echo -e "${idsCL[Green]}Complete${idsCL[Default]}" if [ "${NEW_SITE}" != "" ]; then echo ""; fi
echo -en "${idsCL[Cyan]}Gitea Folder ${idsCL[Default]}" }
${NCMD} chown -R git:git /var/lib/gitea
${NCMD} chmod -R 750 /var/lib/gitea SERVICE(){
echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
echo ""
fi
nid=`expr $nid + 1`
done
if [ "${NEW_SITE}" != "" ]; then echo ""; fi
;;
service)
if [ "${NM_SERVICES[${2}]}" = "" ]; then if [ "${NM_SERVICES[${2}]}" = "" ]; then
echo -e "${idsCL[Red]}(${2}) is not an allowed service.${idsCL[Default]}" echo -e "${idsCL[Red]}(${2}) is not an allowed service.${idsCL[Default]}"
exit 1 exit 1
@@ -420,59 +403,72 @@ service)
echo "" echo ""
echo -e "${idsCL[Green]}${NM_SERVICES[${2}]} has been ${ADISP}ed${idsCL[Default]}" echo -e "${idsCL[Green]}${NM_SERVICES[${2}]} has been ${ADISP}ed${idsCL[Default]}"
echo "" echo ""
exit 0 }
;;
gui)
while :
do
echo ""
echo " [1] Node Status"
echo " [2] Node Services"
echo ""
echo " [3] New Site"
echo " [4] New Certificate"
echo " [5] Renew Certificates"
echo ""
echo " [6] Set folder permissions on nodes"
echo ""
echo " [Q] Quit"
echo ""
echo ""
echo -e -n "${idsCL[LightYellow]}Please select an [ActionItem] from above:${idsCL[Default]} "
read -n 1 opt
echo ""
case $opt in
1)
STATUS
echo ""
read -n 1 -s -p "Press any key to continue"
${0} gui;;
2) GLANCES_INSTALL
INSTALL_MENU;;
3) X11VNC_INSTALL
INSTALL_MENU;;
4) FW_INSTALL
INSTALL_MENU;;
5) LINUPX_UNINSTALL
INSTALL_MENU;;
6) LINUPX_UNINSTALL
INSTALL_MENU;;
[Qq]) EXIT1
exit 1;;
*) echo "Thats an invaild option,";
echo "please select a valid option only.";
sleep 1;;
esac
done
;;
*) GUI(){
echo -e "Usage: ${idsCL[Yellow]}nodemgmt${idsCL[Default]} { ${idsCL[Yellow]}service${idsCL[Default]} [service] [action] | ${idsCL[Yellow]}status${idsCL[Default]} | ${idsCL[Yellow]}newcert${idsCL[Default]} [domain(,s)] | ${idsCL[Yellow]}certrenew${idsCL[Default]} }" while :
do
echo ""
echo " [1] Node Status"
echo " [2] Node Services"
echo ""
echo " [3] New Site"
echo " [4] New Certificate"
echo " [5] Renew Certificates"
echo ""
echo " [6] Set folder permissions on nodes"
echo ""
echo " [Q] Quit"
echo "" echo ""
echo "" echo ""
exit 0 echo -e -n "${idsCL[LightYellow]}Please select an [ActionItem] from above:${idsCL[Default]} "
;; read -n 1 opt
echo ""
case $opt in
1)
STATUS
echo ""
read -n 1 -s -p "Press any key to continue"
${0} gui;;
2) GLANCES_INSTALL
INSTALL_MENU;;
3) X11VNC_INSTALL
INSTALL_MENU;;
4) FW_INSTALL
INSTALL_MENU;;
5) LINUPX_UNINSTALL
INSTALL_MENU;;
6) LINUPX_UNINSTALL
INSTALL_MENU;;
[Qq]) EXIT1
exit 1;;
*) echo "Thats an invaild option,";
echo "please select a valid option only.";
sleep 1;;
esac
done
}
esac if [ ${action-x} ]; then
case $action in
newcert) NEWCERT;;
certrenew) CERTRENEW;;
nightlyrenew) NIGHTLYRENEW;;
delsite) DELSITE;;
newsite) NEWSITE;;
update) ;;
status) STATUS;;
status-check) STATUS-CHECK;;
set-permissions) SET-PERMISSIONS;;
service) SERVICE;;
*)
echo -e "Usage: ${idsCL[Yellow]}nodemgmt${idsCL[Default]} { ${idsCL[Yellow]}service${idsCL[Default]} [service] [action] | ${idsCL[Yellow]}status${idsCL[Default]} | ${idsCL[Yellow]}newcert${idsCL[Default]} [domain(,s)] | ${idsCL[Yellow]}certrenew${idsCL[Default]} }"
echo ""
echo ""
exit 0;;
esac
else
GUI
fi
exit 0 exit 0