From d2ed7cb0e4a65b3971eaa0601b211e83f1d01a1d Mon Sep 17 00:00:00 2001
From: thorstenspille <thorsten.spille@gmail.com>
Date: Sat, 15 Jan 2022 14:10:47 +0100
Subject: [PATCH] open3a: migration to debian bullseye

---
 src/open3a/constants-service.conf |  2 +-
 src/open3a/features.json          |  9 +++++
 src/open3a/info                   |  1 +
 src/open3a/install-service.sh     | 55 ++++++++++++++++++++-----------
 4 files changed, 47 insertions(+), 20 deletions(-)
 create mode 100644 src/open3a/features.json
 create mode 100644 src/open3a/info

diff --git a/src/open3a/constants-service.conf b/src/open3a/constants-service.conf
index bc20c1a..4f5ef36 100644
--- a/src/open3a/constants-service.conf
+++ b/src/open3a/constants-service.conf
@@ -8,7 +8,7 @@
 # This file contains the project constants on service level
 
 # Debian Version, which will be installed
-LXC_TEMPLATE_VERSION="debian-10-standard"
+LXC_TEMPLATE_VERSION="debian-11-standard"
 
 # Create sharefs mountpoint
 LXC_MP="0"
diff --git a/src/open3a/features.json b/src/open3a/features.json
new file mode 100644
index 0000000..0a173fb
--- /dev/null
+++ b/src/open3a/features.json
@@ -0,0 +1,9 @@
+{
+    "unprivileged": 1,
+    "features": {},
+    "sharefs": {},
+    "mem": 1024,
+    "swap": 1024,
+    "hostname": "open3a",
+    "domain": "zmb.rocks"
+}
\ No newline at end of file
diff --git a/src/open3a/info b/src/open3a/info
new file mode 100644
index 0000000..6600e6d
--- /dev/null
+++ b/src/open3a/info
@@ -0,0 +1 @@
+Open3A Server
\ No newline at end of file
diff --git a/src/open3a/install-service.sh b/src/open3a/install-service.sh
index 00c5cc8..28fb349 100644
--- a/src/open3a/install-service.sh
+++ b/src/open3a/install-service.sh
@@ -8,28 +8,45 @@
 source /root/zamba.conf
 source /root/constants-service.conf
 
+webroot=/var/www/html
+
 MYSQL_PASSWORD="$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 20 | head -n 1)"
 
 apt update
 
 DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt install -y -qq unzip sudo nginx-full mariadb-server mariadb-client php php-cli php-fpm php-mysql php-xml php-mbstring php-gd
 
+mkdir /etc/nginx/ssl
+openssl req -x509 -nodes -days 3650 -newkey rsa:4096 -keyout /etc/nginx/ssl/open3a.key -out /etc/nginx/ssl/open3a.crt -subj "/CN=$LXC_HOSTNAME.$LXC_DOMAIN" -addext "subjectAltName=DNS:$LXC_HOSTNAME.$LXC_DOMAIN"
+
 cat << EOF > /etc/nginx/sites-available/default
 server {
-        listen 80 default_server;
-        listen [::]:80 default_server;
+    listen 80;
+    listen [::]:80;
+    server_name _;
 
-        root /var/www/html;
-
-        index index.php;
-
-        server_name _;
-
-        location ~ .php$ {
-                include snippets/fastcgi-php.conf;
-                fastcgi_pass unix:/var/run/php/php7.3-fpm.sock;
-        }
+    return 301 https://$LXC_HOSTNAME.$LXC_DOMAIN;
 }
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name $LXC_HOSTNAME.$LXC_DOMAIN;
+
+    root $webroot;
+
+    index index.php;
+
+    ssl on;
+    ssl_certificate /etc/nginx/ssl/open3a.crt;
+    ssl_certificate_key /etc/nginx/ssl/open3a.key;
+
+    location ~ .php$ {
+        include snippets/fastcgi-php.conf;
+        fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
+    }
+}
+
 EOF
 
 mysql -uroot -e "CREATE USER 'open3a'@'localhost' IDENTIFIED BY '$MYSQL_PASSWORD';
@@ -37,19 +54,19 @@ GRANT USAGE ON * . * TO 'open3a'@'localhost' IDENTIFIED BY '$MYSQL_PASSWORD' WIT
 CREATE DATABASE IF NOT EXISTS open3a;
 GRANT ALL PRIVILEGES ON open3a . * TO 'open3a'@'localhost';"
 
-cd /var/www/html/
-wget https://www.open3a.de/download/open3A%203.4.zip -O open3a.zip
+cd $webroot
+wget https://www.open3a.de/download/open3A%203.5.zip -O $webroot/open3a.zip
 unzip open3a.zip
 rm open3a.zip
 chmod 666 system/DBData/Installation.pfdb.php
 chmod -R 777 specifics/
-chmod -R 777 system/Backups
-chown -R www-data:www-data /var/www/html
+chmod -R 777 system/Backup
+chown -R www-data:www-data $webroot
 
-echo "sudo -u www-data /usr/bin/php /var/www/html/plugins/Installation/backup.php; for backup in $(ls -r1 /var/www/html/system/Backup/*.gz | /bin/grep -v $(date +%Y%m%d)); do /bin/rm $backup;done" > /etc/cron.daily/open3a-backup
+echo "sudo -u www-data /usr/bin/php $webroot/plugins/Installation/backup.php; for backup in \$(ls -r1 $webroot/system/Backup/*.gz | /bin/grep -v \$(date +%Y%m%d)); do /bin/rm \$backup;done" > /etc/cron.daily/open3a-backup
 chmod +x /etc/cron.daily/open3a-backup
 
-systemctl enable --now php7.3-fpm
-systemctl restart nginx
+systemctl enable --now php7.4-fpm
+systemctl restart php7.4-fpm nginx
 
 echo -e "Your open3a installation is now complete. Please continue with setup in your Browser:\nURL:\t\thttp://$LXC_IP\nLogin:\t\tAdmin\nPassword:\tAdmin\n\nMysql-Settings:\nServer:\t\tlocalhost\nUser:\t\topen3a\nPassword:\t$MYSQL_PASSWORD\nDatabase:\topen3a"
\ No newline at end of file