| #!/bin/bash |
| |
| # Wait for MySQL to warm-up |
| while ! mysqladmin status --socket=/var/run/mysqld/mysqld.sock -u${DBUSER} -p${DBPASS} --silent; do |
| echo "Waiting for database to come up..." |
| sleep 2 |
| done |
| |
| # Wait until port becomes free and send sig |
| until ! nc -z sogo-mailcow 20000; |
| do |
| killall -TERM sogod |
| sleep 3 |
| done |
| |
| # Wait for updated schema |
| DBV_NOW=$(mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -e "SELECT version FROM versions WHERE application = 'db_schema';" -BN) |
| DBV_NEW=$(grep -oE '\$db_version = .*;' init_db.inc.php | sed 's/$db_version = //g;s/;//g' | cut -d \" -f2) |
| while [[ "${DBV_NOW}" != "${DBV_NEW}" ]]; do |
| echo "Waiting for schema update..." |
| DBV_NOW=$(mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -e "SELECT version FROM versions WHERE application = 'db_schema';" -BN) |
| DBV_NEW=$(grep -oE '\$db_version = .*;' init_db.inc.php | sed 's/$db_version = //g;s/;//g' | cut -d \" -f2) |
| sleep 5 |
| done |
| echo "DB schema is ${DBV_NOW}" |
| |
| # Recreate view |
| if [[ "${MASTER}" =~ ^([yY][eE][sS]|[yY])+$ ]]; then |
| echo "We are master, preparing sogo_view..." |
| mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -e "DROP VIEW IF EXISTS sogo_view" |
| while [[ ${VIEW_OK} != 'OK' ]]; do |
| mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} << EOF |
| CREATE VIEW sogo_view (c_uid, domain, c_name, c_password, c_cn, mail, aliases, ad_aliases, ext_acl, kind, multiple_bookings) AS |
| SELECT |
| mailbox.username, |
| mailbox.domain, |
| mailbox.username, |
| IF(JSON_UNQUOTE(JSON_VALUE(attributes, '$.force_pw_update')) = '0', IF(JSON_UNQUOTE(JSON_VALUE(attributes, '$.sogo_access')) = 1, password, '{SSHA256}A123A123A321A321A321B321B321B123B123B321B432F123E321123123321321'), '{SSHA256}A123A123A321A321A321B321B321B123B123B321B432F123E321123123321321'), |
| mailbox.name, |
| mailbox.username, |
| IFNULL(GROUP_CONCAT(ga.aliases ORDER BY ga.aliases SEPARATOR ' '), ''), |
| IFNULL(gda.ad_alias, ''), |
| IFNULL(external_acl.send_as_acl, ''), |
| mailbox.kind, |
| mailbox.multiple_bookings |
| FROM |
| mailbox |
| LEFT OUTER JOIN |
| grouped_mail_aliases ga |
| ON ga.username REGEXP CONCAT('(^|,)', mailbox.username, '($|,)') |
| LEFT OUTER JOIN |
| grouped_domain_alias_address gda |
| ON gda.username = mailbox.username |
| LEFT OUTER JOIN |
| grouped_sender_acl_external external_acl |
| ON external_acl.username = mailbox.username |
| WHERE |
| mailbox.active = '1' |
| GROUP BY |
| mailbox.username; |
| EOF |
| if [[ ! -z $(mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -B -e "SELECT 'OK' FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_NAME = 'sogo_view'") ]]; then |
| VIEW_OK=OK |
| else |
| echo "Will retry to setup SOGo view in 3s..." |
| sleep 3 |
| fi |
| done |
| else |
| while [[ ${VIEW_OK} != 'OK' ]]; do |
| if [[ ! -z $(mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -B -e "SELECT 'OK' FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_NAME = 'sogo_view'") ]]; then |
| VIEW_OK=OK |
| else |
| echo "Waiting for SOGo view to be created by master..." |
| sleep 3 |
| fi |
| done |
| fi |
| |
| # Wait for static view table if missing after update and update content |
| if [[ "${MASTER}" =~ ^([yY][eE][sS]|[yY])+$ ]]; then |
| echo "We are master, preparing _sogo_static_view..." |
| while [[ ${STATIC_VIEW_OK} != 'OK' ]]; do |
| if [[ ! -z $(mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -B -e "SELECT 'OK' FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_NAME = '_sogo_static_view'") ]]; then |
| STATIC_VIEW_OK=OK |
| echo "Updating _sogo_static_view content..." |
| # If changed, also update init_db.inc.php |
| mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -B -e "REPLACE INTO _sogo_static_view (c_uid, domain, c_name, c_password, c_cn, mail, aliases, ad_aliases, ext_acl, kind, multiple_bookings) SELECT c_uid, domain, c_name, c_password, c_cn, mail, aliases, ad_aliases, ext_acl, kind, multiple_bookings from sogo_view;" |
| mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -B -e "DELETE FROM _sogo_static_view WHERE c_uid NOT IN (SELECT username FROM mailbox WHERE active = '1')" |
| else |
| echo "Waiting for database initialization..." |
| sleep 3 |
| fi |
| done |
| else |
| while [[ ${STATIC_VIEW_OK} != 'OK' ]]; do |
| if [[ ! -z $(mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -B -e "SELECT 'OK' FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_NAME = '_sogo_static_view'") ]]; then |
| STATIC_VIEW_OK=OK |
| else |
| echo "Waiting for database initialization by master..." |
| sleep 3 |
| fi |
| done |
| fi |
| |
| |
| # Recreate password update trigger |
| if [[ "${MASTER}" =~ ^([yY][eE][sS]|[yY])+$ ]]; then |
| echo "We are master, preparing update trigger..." |
| mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -e "DROP TRIGGER IF EXISTS sogo_update_password" |
| while [[ ${TRIGGER_OK} != 'OK' ]]; do |
| mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} << EOF |
| DELIMITER - |
| CREATE TRIGGER sogo_update_password AFTER UPDATE ON _sogo_static_view |
| FOR EACH ROW |
| BEGIN |
| UPDATE mailbox SET password = NEW.c_password WHERE NEW.c_uid = username; |
| END; |
| - |
| DELIMITER ; |
| EOF |
| if [[ ! -z $(mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -B -e "SELECT 'OK' FROM INFORMATION_SCHEMA.TRIGGERS WHERE TRIGGER_NAME = 'sogo_update_password'") ]]; then |
| TRIGGER_OK=OK |
| else |
| echo "Will retry to setup SOGo password update trigger in 3s" |
| sleep 3 |
| fi |
| done |
| fi |
| |
| if [[ "${ALLOW_ADMIN_EMAIL_LOGIN}" =~ ^([yY][eE][sS]|[yY])+$ ]]; then |
| TRUST_PROXY="YES" |
| else |
| TRUST_PROXY="NO" |
| fi |
| # cat /dev/urandom seems to hang here occasionally and is not recommended anyway, better use openssl |
| RAND_PASS=$(openssl rand -base64 16 | tr -dc _A-Z-a-z-0-9) |
| |
| # Generate plist header with timezone data |
| mkdir -p /var/lib/sogo/GNUstep/Defaults/ |
| cat <<EOF > /var/lib/sogo/GNUstep/Defaults/sogod.plist |
| <?xml version="1.0" encoding="UTF-8"?> |
| <!DOCTYPE plist PUBLIC "-//GNUstep//DTD plist 0.9//EN" "http://www.gnustep.org/plist-0_9.xml"> |
| <plist version="0.9"> |
| <dict> |
| <key>OCSAclURL</key> |
| <string>mysql://${DBUSER}:${DBPASS}@%2Fvar%2Frun%2Fmysqld%2Fmysqld.sock/${DBNAME}/sogo_acl</string> |
| <key>SOGoIMAPServer</key> |
| <string>imap://${IPV4_NETWORK}.250:143/?TLS=YES&tlsVerifyMode=none</string> |
| <key>SOGoTrustProxyAuthentication</key> |
| <string>${TRUST_PROXY}</string> |
| <key>SOGoEncryptionKey</key> |
| <string>${RAND_PASS}</string> |
| <key>OCSCacheFolderURL</key> |
| <string>mysql://${DBUSER}:${DBPASS}@%2Fvar%2Frun%2Fmysqld%2Fmysqld.sock/${DBNAME}/sogo_cache_folder</string> |
| <key>OCSEMailAlarmsFolderURL</key> |
| <string>mysql://${DBUSER}:${DBPASS}@%2Fvar%2Frun%2Fmysqld%2Fmysqld.sock/${DBNAME}/sogo_alarms_folder</string> |
| <key>OCSFolderInfoURL</key> |
| <string>mysql://${DBUSER}:${DBPASS}@%2Fvar%2Frun%2Fmysqld%2Fmysqld.sock/${DBNAME}/sogo_folder_info</string> |
| <key>OCSSessionsFolderURL</key> |
| <string>mysql://${DBUSER}:${DBPASS}@%2Fvar%2Frun%2Fmysqld%2Fmysqld.sock/${DBNAME}/sogo_sessions_folder</string> |
| <key>OCSStoreURL</key> |
| <string>mysql://${DBUSER}:${DBPASS}@%2Fvar%2Frun%2Fmysqld%2Fmysqld.sock/${DBNAME}/sogo_store</string> |
| <key>SOGoProfileURL</key> |
| <string>mysql://${DBUSER}:${DBPASS}@%2Fvar%2Frun%2Fmysqld%2Fmysqld.sock/${DBNAME}/sogo_user_profile</string> |
| <key>SOGoTimeZone</key> |
| <string>${TZ}</string> |
| <key>domains</key> |
| <dict> |
| EOF |
| |
| # Generate multi-domain setup |
| while read -r line gal |
| do |
| echo " <key>${line}</key> |
| <dict> |
| <key>SOGoMailDomain</key> |
| <string>${line}</string> |
| <key>SOGoUserSources</key> |
| <array> |
| <dict> |
| <key>MailFieldNames</key> |
| <array> |
| <string>aliases</string> |
| <string>ad_aliases</string> |
| <string>ext_acl</string> |
| </array> |
| <key>KindFieldName</key> |
| <string>kind</string> |
| <key>DomainFieldName</key> |
| <string>domain</string> |
| <key>MultipleBookingsFieldName</key> |
| <string>multiple_bookings</string> |
| <key>listRequiresDot</key> |
| <string>NO</string> |
| <key>canAuthenticate</key> |
| <string>YES</string> |
| <key>displayName</key> |
| <string>GAL ${line}</string> |
| <key>id</key> |
| <string>${line}</string> |
| <key>isAddressBook</key> |
| <string>${gal}</string> |
| <key>type</key> |
| <string>sql</string> |
| <key>userPasswordAlgorithm</key> |
| <string>${MAILCOW_PASS_SCHEME}</string> |
| <key>prependPasswordScheme</key> |
| <string>YES</string> |
| <key>viewURL</key> |
| <string>mysql://${DBUSER}:${DBPASS}@%2Fvar%2Frun%2Fmysqld%2Fmysqld.sock/${DBNAME}/_sogo_static_view</string> |
| </dict>" >> /var/lib/sogo/GNUstep/Defaults/sogod.plist |
| # Generate alternative LDAP authentication dict, when SQL authentication fails |
| # This will nevertheless read attributes from LDAP |
| line=${line} envsubst < /etc/sogo/plist_ldap >> /var/lib/sogo/GNUstep/Defaults/sogod.plist |
| echo " </array> |
| </dict>" >> /var/lib/sogo/GNUstep/Defaults/sogod.plist |
| done < <(mysql --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -e "SELECT domain, CASE gal WHEN '1' THEN 'YES' ELSE 'NO' END AS gal FROM domain;" -B -N) |
| |
| # Generate footer |
| echo ' </dict> |
| </dict> |
| </plist>' >> /var/lib/sogo/GNUstep/Defaults/sogod.plist |
| |
| # Fix permissions |
| chown sogo:sogo -R /var/lib/sogo/ |
| chmod 600 /var/lib/sogo/GNUstep/Defaults/sogod.plist |
| |
| # Patch ACLs |
| #if [[ ${ACL_ANYONE} == 'allow' ]]; then |
| # #enable any or authenticated targets for ACL |
| # if patch -R -sfN --dry-run /usr/lib/GNUstep/SOGo/Templates/UIxAclEditor.wox < /acl.diff > /dev/null; then |
| # patch -R /usr/lib/GNUstep/SOGo/Templates/UIxAclEditor.wox < /acl.diff; |
| # fi |
| #else |
| # #disable any or authenticated targets for ACL |
| # if patch -sfN --dry-run /usr/lib/GNUstep/SOGo/Templates/UIxAclEditor.wox < /acl.diff > /dev/null; then |
| # patch /usr/lib/GNUstep/SOGo/Templates/UIxAclEditor.wox < /acl.diff; |
| # fi |
| #fi |
| |
| # Copy logo, if any |
| [[ -f /etc/sogo/sogo-full.svg ]] && cp /etc/sogo/sogo-full.svg /usr/lib/GNUstep/SOGo/WebServerResources/img/sogo-full.svg |
| |
| # Rsync web content |
| echo "Syncing web content with named volume" |
| rsync -a /usr/lib/GNUstep/SOGo/. /sogo_web/ |
| |
| # Chown backup path |
| chown -R sogo:sogo /sogo_backup |
| |
| # Creating cronjobs |
| if [[ "${MASTER}" =~ ^([yY][eE][sS]|[yY])+$ ]]; then |
| echo "* * * * * sogo /usr/sbin/sogo-ealarms-notify -p /etc/sogo/sieve.creds 2>/dev/null" > /etc/cron.d/sogo |
| echo "* * * * * sogo /usr/sbin/sogo-tool expire-sessions ${SOGO_EXPIRE_SESSION}" >> /etc/cron.d/sogo |
| echo "0 0 * * * sogo /usr/sbin/sogo-tool update-autoreply -p /etc/sogo/sieve.creds" >> /etc/cron.d/sogo |
| echo "0 2 * * * sogo /usr/sbin/sogo-tool backup /sogo_backup ALL" >> /etc/cron.d/sogo |
| else |
| rm /etc/cron.d/sogo |
| fi |
| |
| exec gosu sogo /usr/sbin/sogod |