nasbeery/nasbeery2

#!/bin/bash
prog="$(basename "$0")"

usage() {
	cat >&2 <<-EOF
	usage: $prog [-h] [-U USERNAME] [-P PASSWORD] [-H HOSTNAME] [-D DOMAIN] [-F]
	  installs nasbeery onto your raspberry pi os
    -U USERNAME  Username for SSH, Cockpit and SMB Login (default: pi)
    -P PASSWORD  Password for SSH, Cockpit and SMB Login (min. 8 chars, default: password prompt)
    -H HOSTNAME  Hostname of this nasbeery (default: nasbeery)
    -D DOMAIN    Domain name of this nasbeery (default: bashclub.lan)
    -Z POOL      Name of the zpool to create (default: tank)
    -S SHARE     Name of the SMB share to create (default: share)
    -F           Enforce formatting disks - WARNING: Destroys all existing data
    -I           Installs ISPconfig3
  ---------------------------------------------------------------------------
    (C) 2022     nasbeery installer by bashclub (https://github.com/bashclub)
  ---------------------------------------------------------------------------
	EOF
	exit $1
}

USERNAME=pi
HOSTNAME=nasbeery
DOMAIN=bashclub.lan
FORMAT=0
ISPCONFIG=0
ZPOOL=tank
SHARE=share

while getopts "hU:P:H:D:FIZ:S:" opt; do
  case $opt in
    h) usage 0 ;;
    U) USERNAME=$OPTARG ;;
    P) PASSWORD=$OPTARG PASSWORD_REPEAT=$OPTARG ;;
    H) HOSTNAME=$OPTARG ;;
    D) DOMAIN=$OPTARG ;;
    F) FORMAT=1 ;;
    I) ISPCONFIG=1 ;;
    Z) ZPOOL=$OPTARG ;;
    S) SHARE=$OPTARG ;;
    *) usage 1 ;;
  esac
done
shift $((OPTIND-1))

# Change password for Samba and Terminal
while [[ "$PASSWORD" != "$PASSWORD_REPEAT" || ${#PASSWORD} -lt 8 ]]; do
  PASSWORD=$(whiptail --backtitle "NASBEERY SETUP" --title "Set password!" --passwordbox "${PASSWORD_invalid_message}Please set a password for Terminal, Samba and Backupwireless\n(At least 8 characters!):" 10 75 3>&1 1>&2 2>&3)
  PASSWORD_REPEAT=$(whiptail --backtitle "NASBEERY SETUP" --title "Set password!" --passwordbox "Please repeat the Password:" 10 70 3>&1 1>&2 2>&3)
  PASSWORD_invalid_message="ERROR: Password is too short, or not matching! \n\n"
done

# check current zfs state
if [[ $(lsmod | grep -E ^zfs) ]] && [[ $FORMAT -eq 0 ]]; then
    # module is loaded
    whiptail --title "Possible data loss!" \
    --backtitle "NASBEERY SETUP" \
    --yes-button "PRESERVE DATA" \
    --no-button  "FORMAT DISKS!" \
    --yesno "Would you like to preserve you existing ZFS data from a previous installation?" 10 75
    FORMAT=$?
fi

# ask for ispconfig installation
if [[ $ISPCONFIG -eq 0 ]]; then
    whiptail --title "ISPConfig Setup!" \
    --backtitle "INSTALL ISPCONFIG?" \
    --yes-button "INSTALL ISPCONFIG" \
    --no-button  "DO NOT INSTALL ISPCONFIG" \
    --yesno "Would you like to to install ISPConfig on yout nasbeery?" 10 75
    ISPCONFIG=$?
fi

# add extra apt keys
apt-key adv --fetch-keys https://pkg.ltec.ch/public/conf/ltec-ag.gpg.key # wsdd repo

# add extra apt repos
echo "deb https://pkg.ltec.ch/public/ $(lsb_release -cs) main" > /etc/apt/sources.list.d/wsdd.list # wsdd repo
echo "deb http://ftp.de.debian.org/debian/ bullseye-backports main contrib non-free" > /etc/apt/sources.list.d/bulleye-backports.list # backports repo

# pin cockpit to buster backports
cat << EOF > /etc/apt/preferences.d/99-cockpit
Package: cockpit cockpit-*
Pin: release a=bullseye-backports
Pin-Priority: 900
EOF

# update system and install packages
apt update
DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt -y -qq -o DPkg::options::="--force-confdef" -o DPkg::options::="--force-confold" dist-upgrade
DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt -y -qq -o DPkg::options::="--force-confdef" -o DPkg::options::="--force-confold" install raspberrypi-kernel-headers acl samba-dsdb-modules samba-vfs-modules wsdd ntpdate git apt-transport-https gnupg2 software-properties-common vim htop zfs-dkms zfsutils-linux zfs-auto-snapshot wsdd net-tools dnsutils
DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt -y -qq -o DPkg::options::="--force-confdef" -o DPkg::options::="--force-confold" install --no-install-recommends cockpit

# activate zfs module 
modprobe zfs

# update time via ntp
ntpdate-debian -b

case $FORMAT in
   0) echo "Your ZFS Data will be preserved";;
   1) echo "Existing data on the drives will be deleted..."
       zpool create -f -o autoexpand=on -o ashift=12 $ZPOOL mirror sda sdb;;
   255) echo "[ESC] key pressed >> EXIT" &&  exit;;
esac

zfs create -o compression=lz4 $ZPOOL/$SHARE
chmod -R 770 /$ZPOOL
chown -R $USERNAME:root /$ZPOOL

# set hostname
echo "$HOSTNAME" > /etc/hostname
cat << EOF > /etc/hosts
# Host addresses
127.0.0.1  localhost
127.0.1.1  $HOSTNAME.$DOMAIN $HOSTNAME
::1        localhost ip6-localhost ip6-loopback
ff02::1    ip6-allnodes
ff02::2    ip6-allrouters
EOF

# configure user
useradd $USERNAME
echo "$USERNAME:$PASSWORD" | chpasswd
smbpasswd -x $USERNAME
(echo $PASSWORD; echo $PASSWORD) | smbpasswd -a $USERNAME

# install cockpit zfs manager
git clone https://github.com/45drives/cockpit-zfs-manager.git /usr/src/cockpit-zfs-manager
cp -r /usr/src/cockpit-zfs-manager/zfs /usr/share/cockpit
mkdir -p /etc/cockpit/zfs/shares
mkdir -p /etc/cockpit/zfs/snapshots
cat << EOF > /etc/cockpit/zfs/config.json 
{
  "#1": "COCKPIT ZFS MANAGER",
  "#2": "WARNING: DO NOT EDIT, AUTO-GENERATED CONFIGURATION",
  "cockpit": {
    "manage": true
  },
  "disks": {
    "base2": false
  },
  "loglevel": "2",
  "samba": {
    "manage": true,
    "windowscompatibility": true
  },
  "updates": {
    "check": true
  },
  "zfs": {
    "filesystem": {
      "cloneorigin": false,
      "quotarestrict": true,
      "readonlylockdown": false,
      "snapshotactions": true
    },
    "snapshot": {
      "filesystemlist": true
    },
    "status": {
      "errorcolors": true,
      "trimunsupported": false
    },
    "storagepool": {
      "activetab": 1,
      "boot": true,
      "bootlockdown": true,
      "count": true,
      "refreshall": false,
      "root": true
    }
  }
}
EOF
cat << EOF > /etc/cockpit/zfs/shares.conf 
# COCKPIT ZFS MANAGER
# WARNING: DO NOT EDIT, AUTO-GENERATED CONFIGURATION
EOF

# Install zfs-auto-snapshot and change Retention from 24 to 48h and 12 to 3 Month for more sense of usage
sed -i 's/24/48/g' /etc/cron.hourly/zfs-auto-snapshot
sed -i 's/12/3/g' /etc/cron.monthly/zfs-auto-snapshot

echo -e 'PATH="/usr/bin:/bin:/usr/local/sbin:/usr/sbin:/sbin"\n*/1 * * * * root echo 14 > /sys/class/gpio/export 2> /dev/null;echo out > /sys/class/gpio/gpio14/direction ; zpool import -fa -d /dev/ > /dev/null; zpool list| grep -q ONLINE; echo \$? > /sys/class/gpio/gpio14/value' |  tee  "/etc/cron.d/raidled"

# configure samba server
cat << EOF > /etc/samba/smb.conf
[global]
    workgroup = WORKGROUP
    log file = /var/log/samba/log.%m
    max log size = 1000
    logging = file
    panic action = /usr/share/samba/panic-action %d

    server role = standalone server
    obey pam restrictions = yes
    unix password sync = yes
    passwd program = /usr/bin/passwd %u
    passwd chat = *Enter\snew\s*\password:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
    pam password change = yes
    map to guest = bad user

    vfs objects = shadow_copy2
    shadow: snapdir = .zfs/snapshot
    shadow: sort = desc
    shadow: format = -%Y-%m-%d-%H%M
    shadow: snapprefix = ^zfs-auto-snap_\(frequent\)\{0,1\}\(hourly\)\{0,1\}\(daily\)\{0,1\}\(weekly\)\{0,1\}\(monthly\)\{0,1\}
    shadow: delimiter = -20
    
[$SHARE]
    comment = Main Share
    path = /$ZPOOL/$SHARE
    read only = No
    create mask = 0660
    directory mask = 0770
EOF

systemctl enable smbd nmbd wsdd 
systemctl restart smbd nmbd wsdd 

if [ $ISPCONFIG -eq 1 ]; then
    zfs create -o mountpoint=/var/www tank/ispconfig/www
    zfs create -o mountpoint=/var/backup tank/ispconfig/backup
    zfs create -o mountpoint=/var/lib/mysql tank/ispconfig/mysql
    wget -O - https://get.ispconfig.org | sh -s -- --help
    #Rar is not available, so we go with Midnight Commander:)
    sed -i 's/rar/mc/g' /tmp/ispconfig-ai/lib/os/class.ISPConfigDebianOS.inc.php
    php /tmp/ispconfig-ai/ispconfig.ai.php --lang=en --use-php=7.4,8.0,8.1 --no-mail --no-dns --no-firewall --no-roundcube --no-quota --unattended-upgrades --i-know-what-i-am-doing
fi
echo "nasbeery installation finished! rebooting..."
reboot