Upload

#!
/bin/bash
# install_fusionpbx
LICENSE=$( cat << DELIM

#-----------------------------------------------------------------------------#
# "THE WAF LICENSE" (version 1)
# This is the Wife Acceptance Factor (WAF) License.
# jamesdotfsatstubbornrosesd0tcom wrote this file. As long as you retain this
# notice you can do whatever you want with it. If you appreciate the work,
# please consider purchasing something from my wife's wishlist. That pays
# bigger dividends to this coder than anything else I can think of ;). It also
# keeps her happy while she's being ignored; so I can work on this stuff.
# James Rose
#
# latest wishlist: http://www.stubbornroses.com/waf.html
#
# Credit: Based off of the BEER-WARE LICENSE (REVISION 42) by Poul-Henning Kamp
#
# Contributor(s):
#
Gill Abada <ga@steadfasttelecom.com>
#-----------------------------------------------------------------------------DELIM
)
#--------#VARIABLES
#--------#Variables are for the auto installation option.
#for apache set to a, for nginx/php-fpm set to n -> for an auto install, user mode will prompt
APACHENGINX=n
# for mysql set m. for sqlite set s. for postgresql set p

SQLITEMYSQL=m
# for postgresql v 9.0 (from ppa) set to 9

# must set SQLITEMYSQL to p
#POSTGRES9=9
# to start FreeSWITCH with -nonat option set SETNONAT to y

SETNONAT=y
# rm -Rf /opt? A default install doesn't have /opt so no worries

# if you do, set to no, and it will link /usr/local/freeswitch to /opt/freeswitch
#REMOVED OPTION
#RMOPT=y
# use freedtm/dahdi? y/n

DO_DAHDI=n
# default distro
#DISTRO=precise
#DISTRO=squeeze
#DISTRO=precise
#DISTRO=lucid
#DISTRO=wheezy
DISTRO=trusty
#below is a list of modules we want to add to provide functionality for FusionPBX

#don't worry about the applications/mod_ format. This script will find that in modules.conf
#PAY ATTENTION TO THE SPACES POST AND PRE PARENTHESIS
# mod_shout removed
if [ $DO_DAHDI == "y" ]; then
modules_add=( ../../libs/freetdm/mod_freetdm mod_spandsp mod_dingaling
mod_portaudio mod_callcenter mod_lcr mod_cidlookup mod_flite mod_memcache
mod_codec2 mod_pocketsphinx mod_xml_cdr mod_say_es mod_say_en )
else
modules_add=( mod_spandsp mod_dingaling mod_callcenter mod_lcr mod_cidlookup
mod_memcache mod_codec2 mod_pocketsphinx mod_xml_cdr mod_say_es mod_say_en )
fi
#------#DEFINES
#------VERSION="Version - using subversion, no longer keeping track. WAF License"
#latest release
FPBXBRANCH="http://fusionpbx.googlecode.com/svn/trunk/fusionpbx"
#dev branch
#FPBXBRANCH="http://fusionpbx.googlecode.com/svn/branches/dev/fusionpbx"
# Modules_comp_default determined using
# grep -v ^$ /usr/src/freeswitch/modules.conf |grep -v ^# | tr '\n' ' '
# on FreeSWITCH version FreeSWITCH Version 1.0.head (git-8f2ee97 2010-12-05 17-19-28
-0600)
#modules_comp_default=( loggers/mod_console loggers/mod_logfile loggers/mod_syslog
applications/mod_commands applications/mod_conference applications/mod_dptools
applications/mod_enum applications/mod_fifo applications/mod_db applications/mod_hash
applications/mod_voicemail applications/mod_expr applications/mod_esf applications/mod_fsv
applications/mod_spandsp applications/mod_cluechoo applications/mod_valet_parking
codecs/mod_g723_1 codecs/mod_amr codecs/mod_g729 codecs/mod_h26x codecs/mod_bv
codecs/mod_ilbc codecs/mod_speex codecs/mod_siren dialplans/mod_dialplan_xml
dialplans/mod_dialplan_asterisk endpoints/mod_sofia endpoints/mod_loopback
event_handlers/mod_event_socket event_handlers/mod_cdr_csv formats/mod_native_file
formats/mod_sndfile formats/mod_local_stream formats/mod_tone_stream
formats/mod_file_string languages/mod_spidermonkey languages/mod_lua say/mod_say_en

say/mod_say_ru )
#making dynamic
#MOVING: Needs to happen after bootstrap...
#modules_comp_default=( `/bin/grep -v ^$ /usr/src/freeswitch/modules.conf |/bin/grep -v ^# |
/usr/bin/tr '\n' ' '` )
#staying with default repository, feel free to change this to github. Some report faster
downloads.
FSGIT=https://freeswitch.org/stash/scm/fs/freeswitch.git
#FSGIT=https://stash.freeswitch.org/scm/fs/freeswitch.git
#FSGIT=git://github.com/FreeSWITCH/FreeSWITCH.git
FSSTABLE=true
FSStableVer="v1.4"
#right now, make -j not working. see: jira FS-3005

#CORES=$(/bin/grep processor -c /proc/cpuinfo)
CORES=1
FQDN=$(hostname -f)
#SRCPATH="/usr/src/freeswitch" #DEFAULT
SRCPATH="/usr/src/freeswitch"
#EN_PATH="/usr/local/freeswitch/conf/autoload_configs" #DEFAULT
EN_PATH="/usr/local/freeswitch/conf/autoload_configs"
WWW_PATH="/var/www"
#used for Apache

#WWW_PATH="/var/www/html"
GUI_NAME=fusionpbx
INST_FPBX=svn
#INST_FPBX=tgz
#full path required

#TGZ_FILE="/home/coltpbx/fusionpbx-1.2.1.tar.gz"
FSREV="187abe02af4d64cdedc598bd3dfb1cd3ed0f4a91"
#IF FSCHECKOUTVER is true, FSSTABLE needs to be false
FSCHECKOUTVER=false
FPBXREV="1876"
FBPXCHECKOUTVER=false
URLSCRIPT="http://fusionpbx.googlecode.com/svn/branches/dev/scripts/install/ubuntu/install_f
usionpbx.sh"
INSFUSION=0
INSFREESWITCH=0
UPGFUSION=0
UPGFREESWITCH=0
#--------# NOTES
#--------# This Script installs or upgrades FreeSWITCH and FusionPBX on a fresh install of
# Ubuntu 10.04 LTS [lucid]. It tries to edit all appropriate files, and
# set the permissions correctly.
#When you install ubuntu, you should select the "Manual package selection" option.
#This way we can keep the install to the bare minimum. This script will install
#everything you need (and nothing) - hopefully, you don't. Just quit tasksel
#--------#FUNCTIONS
#--------function nativepgsql {
/bin/echo
/bin/echo "By default, FreeSWITCH is using sqlite, until we tell it not to."
/bin/echo "FreeSWITCH can be configured to use postgresql natively, but it is"
/bin/echo "not always advantageous to do so."
read -p " Use Postgres (p) or Sqlite (s) [p/S]? " FSDB
case $FSDB in
[pP])
#tell FS about the postgresql database...
echo " Please type in the password for the freeswitch database
you configured below."
read -p "Password: " FSDBPASS
FPATH="/var/www/fusionpbx/resources/templates/conf"
/bin/echo "setting switch.conf.xml"
sed -i $FPATH/autoload_configs/switch.conf.xml -e
s,\<\/settings\>,,g -e s,\<\/configuration\>,,g
cat >> $FPATH/autoload_configs/switch.conf.xml <<EOF
<param name="core-db-dsn" value="pgsql://hostaddr=127.0.0.1 dbname=freeswitch

user=fusionpbx password=$FSDBPASS options='-c client_min_messages=NOTICE'
application_name='freeswitch'" />
</settings>
</configuration>
EOF
/bin/echo "setting callcenter.conf.xml"

sed -i $FPATH/autoload_configs/callcenter.conf.xml -e
s,\<\/settings\>,,g -e s,\<\/configuration\>,,g
cat >> $FPATH/autoload_configs/callcenter.conf.xml <<EOF
<param name="odbc-dsn" value="\$\${dsn}"/>
</settings>
</configuration>
EOF
/bin/echo "setting fifo.conf.xml"

sed -i $FPATH/autoload_configs/fifo.conf.xml -e s,\<\/settings\>,,g
-e s,\<\/configuration\>,,g
cat >> $FPATH/autoload_configs/fifo.conf.xml <<EOF
</settings>
</configuration>
EOF
/bin/echo "setting internal.conf.xml"

sed -i $FPATH/sip_profiles/internal.xml -e s,\<\/settings\>,,g -e
s,\<\/configuration\>,,g
cat >> $FPATH/sip_profiles/internal.xml <<EOF
</settings>
</configuration>
EOF
/bin/echo "setting external.conf.xml"

sed -i $FPATH/sip_profiles/external.xml -e s,\<\/settings\>,,g -e
s,\<\/configuration\>,,g
cat >> $FPATH/sip_profiles/external.xml <<EOF
</settings>
</configuration>
EOF
/bin/echo "setting db.conf.xml"

sed -i $FPATH/autoload_configs/db.conf.xml -e s,\<\/settings\>,,g
-e s,\<\/configuration\>,,g
cat >> $FPATH/autoload_configs/db.conf.xml <<EOF
</settings>
</configuration>
EOF
;;
*)
/bin/echo "Ok, using sqlite, nothing more to do here."
;;
esac
function nginxconfig {
apt-get install -y ssl-cert
ln -s /etc/ssl/private/ssl-cert-snakeoil.key /etc/ssl/private/nginx.key
ln -s /etc/ssl/certs/ssl-cert-snakeoil.pem /etc/ssl/certs/nginx.crt
ln -s /etc/ssl/certs/nginx.crt $WWW_PATH/$GUI_NAME/$HOSTNAME.crt
#don't forget to escape 'DELIM'. otherwise the $fastcgi part

#gets escaped.
#manually escaping now. needs variables....
/bin/cat > /etc/nginx/sites-available/$GUI_NAME <<DELIM
server {
listen 127.0.0.1:80;
server_name 127.0.0.1;
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
client_max_body_size 10M;
client_body_buffer_size 128k;
location / {
root $WWW_PATH/$GUI_NAME;
index index.php;
}
location ~ \.php$ {
fastcgi_pass unix:/var/run/php5-fpm.sock;
#fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $WWW_PATH/$GUI_NAME\
$fastcgi_script_name;
}
# Disable viewing .htaccess & .htpassword & .db
location ~ .htaccess {
deny all;
}
location ~ .htpassword {
deny all;
}
location ~^.+.(db)$ {
deny all;
}
}
server {
listen 80;
server_name $GUI_NAME;
#grandstream
rewrite "^.*/provision/cfg([A-Fa-f0-9]{12})(\.(xml|cfg))?$" /app/provision/?mac=\$1;
#aastra
#rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(cfg))?$" /app/provision/?mac=\$1 last;
#yealink common
rewrite "^.*/(y[0-9]{12})(\.cfg)?$" /app/provision/index.php?file=\$1\$2;
#yealink mac
rewrite "^.*/([A-Fa-f0-9]{12})(\.(xml|cfg))?$" /app/provision/index.php?mac=\$1 last;
if (\$uri !~* ^.*provision.*$) {

rewrite ^(.*) https://\$host\$1 permanent;
break;
location / {
index index.php;
}
location ~ \.php$ {
#fastcgi_pass 127.0.0.1:9000;
}

deny all;
}
deny all;
}
deny all;
}
}
server {
listen 443;
server_name $GUI_NAME;
ssl
on;
ssl_certificate
/etc/ssl/certs/nginx.crt;
ssl_certificate_key
ssl_protocols
ssl_ciphers
/etc/ssl/private/nginx.key;
SSLv3 TLSv1;
HIGH:!ADH:!MD5;
#grandstream
rewrite "^.*/provision/cfg([A-Fa-f0-9]{12})(\.(xml|cfg))?$" /app/provision/?mac=\$1;
#aastra
#rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(cfg))?$" /app/provision/?mac=\$1 last;
#yealink common
rewrite "^.*/(y[0-9]{12})(\.cfg)?$" /app/provision/index.php?file=\$1\$2;
#yealink mac
rewrite "^.*/([A-Fa-f0-9]{12})(\.(xml|cfg))?$" /app/provision/index.php?mac=\$1 last;
location / {
index index.php;
}
location ~ \.php$ {
#fastcgi_pass 127.0.0.1:9000;
}

deny all;
}
deny all;
}
deny all;
}
}
DELIM
/bin/ln -s /etc/nginx/sites-available/$GUI_NAME /etc/nginx/sites-enabled/
$GUI_NAME
/bin/echo "document root for nginx is:"
/bin/echo " $WWW_PATH/$GUI_NAME"

/bin/echo " php has an upload file size limit of 10 MegaBytes"
/bin/echo
/bin/echo "now install FusionPBX. This should go fast."
/bin/echo
#nginx install doesn't create /var/www

/bin/mkdir $WWW_PATH
/bin/chown -R www-data:www-data $WWW_PATH
/bin/chmod -R 775 $WWW_PATH
/etc/init.d/php5-fpm
/etc/init.d/nginx restart
}
function fusionfail2ban {
/bin/cat > /etc/fail2ban/filter.d/$GUI_NAME.conf <<'DELIM'

# Fail2Ban configuration file
#
# Author: soapee01
#
[Definition]
# Option: failregex
# Notes.: regex to match the password failures messages in the logfile. The
#
host must be matched by a group named "host". The tag "<HOST>" can
be used for standard IP/hostname matching and is only an alias for
(?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
# Values: TEXT
#
#failregex = [hostname] FusionPBX: \[<HOST>\] authentication failed
#[hostname] variable doesn't seem to work in every case. Do this instead:
failregex = .* FusionPBX: \[<HOST>\] authentication failed for
= .* FusionPBX: \[<HOST>\] provision attempt bad password for
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.
# Values: TEXT
#
ignoreregex =
DELIM
/bin/grep -i $GUI_NAME /etc/fail2ban/jail.local > /dev/null
if [ $? -eq 0 ]; then
/bin/echo "FusionPBX Jail already set"
else
/bin/cat >> /etc/fail2ban/jail.local <<DELIM
[$GUI_NAME]
enabled = true
port
= 80,443
protocol = tcp
filter = $GUI_NAME
logpath = /var/log/auth.log
action = iptables-allports[name=$GUI_NAME, protocol=all]
#
sendmail-whois[name=$GUI_NAME, dest=root, sender=fail2ban@example.org] #no
smtp server installed
maxretry = 5
findtime = 600
bantime = 600
DELIM
fi
}
function www_permissions {
#consider not stopping here... it's causing some significant delays, or just pause until it
starts back up...
#/etc/init.d/freeswitch stop
/usr/sbin/adduser www-data audio
/usr/sbin/adduser www-data dialout
/bin/echo "setting FreeSWITCH owned by www-data.www-data"
/bin/chown -R www-data.www-data /usr/local/freeswitch
#remove 'other' permissions on freeswitch
/bin/chmod -R o-rwx /usr/local/freeswitch/
#set FreeSWITCH directories full permissions for user/group with group sticky
/bin/echo "Setting group ID sticky for FreeSWITCH"
/usr/bin/find /usr/local/freeswitch -type d -exec /bin/chmod u=rwx,g=srx,o= {} \;
#make sure FreeSWITCH directories have group write
/bin/echo "Setting Group Write for FreeSWITCH files"
/usr/bin/find /usr/local/freeswitch -type f -exec /bin/chmod g+w {} \;
#make sure FreeSWITCH files have group write
/bin/echo "Setting Group Write for FreeSWITCH directories"
/usr/bin/find /usr/local/freeswitch -type d -exec /bin/chmod g+w {} \;
/bin/echo "setting FusionPBX owned by www-data.www-data just in case"
if [ -e /var/www/fusionpbx ]; then
/bin/chown -R www-data.www-data /var/www/fusionpbx
fi
/bin/echo "Changing /etc/init.d/freeswitch to start with user www-data"
/bin/sed -i -e s,'USER=freeswitch','USER=www-data', /etc/init.d/freeswitch
#/etc/init.d/freeswitch start
}
function finish_fpbx_install_permissions {
/bin/echo
/bin/echo "The FusionPBX installation changed permissions of
/usr/local/freeswitch/storage"
/bin/echo " Waiting on you to finish installation (via browser), I'll clean up"
/bin/echo -ne " the last bit of permissions when you finish."
/bin/echo "Waiting on $WWW_PATH/$GUI_NAME/resources/config.php"
while [ ! -e $WWW_PATH/$GUI_NAME/resources/config.php ]
do
/bin/echo -ne '.'
sleep 1
done
/bin/echo
/bin/echo "$WWW_PATH/$GUI_NAME/resources/config.php Found!"
/bin/echo " Waiting 5 more seconds to be sure. "
SLEEPTIME=0
while [ "$SLEEPTIME" -lt 5 ]
do
/bin/echo -ne '.'
sleep 1
let "SLEEPTIME = $SLEEPTIME + 1"
done
/bin/echo " Fixing..."

/bin/echo " FIXED"
}
function build_modules {
#bandaid
sed -i -e "s/applications\/mod_voicemail_ivr/#applications\/mod_voicemail_ivr/"
$SRCPATH/modules.conf
#-----------# new way v2
#-----------#find the default modules - redundant really...
modules_comp_default=( `/bin/grep -v ^$ /usr/src/freeswitch/modules.conf |/bin/grep -v
^# | /usr/bin/tr '\n' ' '` )
#add the directory prefixes to the modules in array so the modules we wish to add will
compile
module_count=ècho ${#modules_add[@]}`
index=0
while [ "$index" -lt "$module_count" ]
do
modules_compile_add[$index]=`/bin/grep ${modules_add[$index]}
$SRCPATH/modules.conf | sed -e "s/#//g"`
let "index = $index + 1"
done
modules_compile=( ${modules_comp_default[*]} ${modules_compile_add[*]} )
#BUILD MODULES.CONF for COMPILER

echo
echo
echo "Now enabling modules for compile in $SRCPATH/modules.conf"

index=0
module_count=ècho ${#modules_compile[@]}`
#get rid of funky spacing in modules.conf
/bin/sed -i -e "s/ *//g" $SRCPATH/modules.conf
do
grep ${modules_compile[$index]} $SRCPATH/modules.conf > /dev/null
if [ $? -eq 0 ]; then
#module is present in file. see if we need to enable it
grep '#'${modules_compile[$index]}
$SRCPATH/modules.conf > /dev/null
if [ $? -eq 0 ]; then
/bin/sed -i -e s,'#'$
{modules_compile[$index]},${modules_compile[$index]}, $SRCPATH/modules.conf
/bin/echo "
[ENABLED] $
/bin/echo "
${modules_compile[$index]}
{modules_compile[$index]}"
else
ALREADY ENABLED!"
fi
else
#module is not present. Add to end of file
#/bin/echo "did not find ${modules_compile[$index]}"
/bin/echo ${modules_compile[$index]} >>
$SRCPATH/modules.conf
/bin/echo "
fi

done
#--------------
[ADDED] ${modules_compile[$index]}"
#end new way v2

#-------------}
function enable_modules {
#-----------# new way v2
#-----------#ENABLE MODULES for FreeSWITCH
#
echo
echo
echo "Now enabling modules for FreeSWITCH in $EN_PATH/modules.conf.xml"
index=0
module_count=ècho ${#modules_add[@]}`
#get rid of any funky whitespace
/bin/sed -i -e s,'','>-->', $EN_PATH/modules.conf.xml
do
#more strangness to take care of, example:
#Now enabling modules for FreeSWITCH in
/usr/local/freeswitch/conf/autoload_configs/modules.conf.xml
#[ADDED] ../../libs/freetdm/mod_freetdm
modules_add[$index]=`/bin/echo ${modules_add[$index]} | /bin/sed -e
's/.*mod_/mod_/'`
grep ${modules_add[$index]} $EN_PATH/modules.conf.xml > /dev/null
if [ $? -eq 0 ]; then
#module is present in file, see if we need to enable it.
grep ''
$EN_PATH/modules.conf.xml > /dev/null
if [ $? -eq 0 ]; then
#/bin/echo "found ${modules_compile[$index]}"

/bin/sed -i -e s,' "--mode=relink gcc -lgnutls"
#tls no longer required for dingaling, so this weird issue doesn't happen. now
uses openssl.
#
/bin/grep 'lgnutls'
/usr/src/freeswitch/src/mod/endpoints/mod_dingaling/mod_dingaling.la > /dev/null
#
if [ $? -eq 0 ]; then
#
#
/bin/echo "dingaling fix already applied."

else
#
/bin/sed -i -e s,'--mode=relink gcc','--mode=relink gcc -lgnutls',
/usr/src/freeswitch/src/mod/endpoints/mod_dingaling/mod_dingaling.la
#
fi
/bin/echo " multicore processor detected. Installing with -j $CORES"
/usr/bin/time /usr/bin/make -j $CORES install
else
/bin/echo " singlecore processor detected. Starting install sans -j"
/usr/bin/time /usr/bin/make install
fi
#/usr/bin/time /usr/bin/make install
if [ $? -ne 0 ]; then
/bin/echo "ERROR: FreeSWITCH INSTALL Failure."
exit 1
else
/bin/echo "install_done" >> /tmp/install_fusion_status
fi
fi
#-----------------------# FREESWITCH HD SOUNDS

#-----------------------/bin/grep 'sounds_done' /tmp/install_fusion_status > /dev/null
if [ $? -eq 0 ]; then
/bin/echo "FreeSWITCH HD SOUNDS DONE! Skipping."
else
/bin/echo
/bin/echo -ne "Installing FreeSWITCH HD sounds (16/8khz). This will take a while
[~10 minutes]"
/bin/sleep 1
/bin/echo -ne "."
/bin/sleep 1
/bin/echo -ne "."
/bin/sleep 1
/bin/echo "."
/usr/bin/time /usr/bin/make -j $CORES hd-sounds-install
else
/usr/bin/time /usr/bin/make hd-sounds-install
fi
#/usr/bin/time /usr/bin/make hd-sounds-install
if [ $? -ne 0 ]; then
/bin/echo "ERROR: FreeSWITCH make cdsounds-install ERROR."
exit 1
else
/bin/echo "sounds_done" >> /tmp/install_fusion_status
fi
fi

/bin/echo
fi
#-----------------------# FREESWITCH MOH

#-----------------------/bin/grep 'moh_done' /tmp/install_fusion_status > /dev/null
if [ $? -eq 0 ]; then
/bin/echo "FreeSWITCH MOH DONE! Skipping."
else
/bin/echo
/bin/echo -ne "Installing FreeSWITCH HD Music On Hold sounds (16/8kHz). This
will take a while [~10 minutes]"
/bin/sleep 1
/bin/echo -ne "."
/bin/sleep 1
/bin/echo -ne "."
/bin/sleep 1
/bin/echo "."
/usr/bin/time /usr/bin/make -j $CORES hd-moh-install
else
/usr/bin/time /usr/bin/make hd-moh-install
fi
#/usr/bin/make hd-moh-install
if [ $? -ne 0 ]; then
/bin/echo "ERROR: FreeSWITCH make cd-moh-install ERROR."
exit 1
else
/bin/echo "moh_done" >> /tmp/install_fusion_status
fi
fi

/bin/echo
fi
#-----------------------# FREESWITCH INIT

#-----------------------#no need for tmp file. already handled...
/bin/echo
/bin/echo "Configuring /etc/init.d/freeswitch"
/bin/grep local /etc/init.d/freeswitch > /dev/null

if [ $? -eq 0 ]; then
/bin/echo "/etc/init.d/freeswitch already edited, skipping"
elif [ -e /usr/src/freeswitch/debian/freeswitch.init ]; then
/bin/sed /usr/src/freeswitch/debian/freeswitch.init -e s,opt,usr/local,
>/etc/init.d/freeswitch
else
/bin/sed /usr/src/freeswitch/debian/freeswitch-sysvinit.freeswitch.init -e
s,opt,usr/local, >/etc/init.d/freeswitch
#DAEMON
/bin/sed -i /etc/init.d/freeswitch -e
s,^DAEMON=.*,DAEMON=/usr/local/freeswitch/bin/freeswitch,
#DAEMON_ARGS
/bin/sed -i /etc/init.d/freeswitch -e s,'^DAEMON_ARGS=.*','DAEMON_ARGS="-u
www-data -g www-data -rp -nc -nonat"',
#PIDFILE
s,^PIDFILE=.*,PIDFILE=/usr/local/freeswitch/run/\$NAME.pid,
#WORKDIR
s,^WORKDIR=.*,WORKDIR=/usr/local/freeswitch/lib/,
fi
if [ $? -ne 0 ]; then
/bin/echo "ERROR: Couldn't edit FreeSWITCH init script."
exit 1
fi
/bin/chmod 755 /etc/init.d/freeswitch

/bin/echo "enabling FreeSWITCH to start at boot"
/bin/mkdir /etc/freeswitch
/bin/touch /etc/freeswitch/freeswitch.xml
/bin/grep true /etc/default/freeswitch > /dev/null

if [ $? -eq 0 ]; then
/bin/echo "/etc/default/freeswitch already edited, skipping"
else
if [ -e /usr/src/freeswitch/debian/freeswitch-sysvinit.freeswitch.default ]; then
/bin/sed /usr/src/freeswitch/debian/freeswitch-sysvinit.freeswitch.default
-e s,false,true, > /etc/default/freeswitch
if [ $? -ne 0 ]; then
/bin/echo "ERROR: Couldn't edit freeswitch RC script."
exit 1
fi
else
/bin/sed /usr/src/freeswitch/debian/freeswitch.default -e s,false,true, >
/etc/default/freeswitch
if [ $? -ne 0 ]; then
/bin/echo "ERROR: Couldn't edit freeswitch RC script."
exit 1
fi
fi
/bin/echo "Checking for a public IP Address..."
PUBLICIP=no
#turn off the auto-nat when we start freeswitch.

#nasty syntax. searches for 10.a.b.c or 192.168.x.y addresses in ifconfig.
/sbin/ifconfig | \
/bin/grep 'inet addr:' | \
/usr/bin/cut -d: -f2 | \
/usr/bin/awk '{ print $1}' | \
while read IPADDR; do
echo "$IPADDR" | \
/bin/grep -e '^10\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}$' \
-e '^192\.168\.[0-9]\{1,3\}\.[0-9]\{1,3\}$' \
-e '^127.0.0.1$'
#-e '^172\.[16-31]\.[0-9]\{1,3\}\.[0-9]\{1,3\}' \
if [ $? -ne 0 ]; then
PUBLICIP=yes
fi
done
case "$PUBLICIP" in
[Yy]*)
/bin/echo "You appear to have a public IP address."
/bin/echo " I can make sure FreeSWITCH starts
with"
/bin/echo " the -nonat option (starts quicker)."
/bin/echo
read -p "Would you like for me to do this (y/n)? "
SETNONAT
fi
;;
*)
/bin/echo "Dynamic IP. leaving FreeSWITCH for
aggressive nat"
SETNONAT=no
;;
esac
fi
case "$SETNONAT" in
[Yy]*)
/bin/sed /etc/default/freeswitch -i -e s,'FREESWITCH_PARAMS="nc"','FREESWITCH_PARAMS="-nc -nonat -reincarnate"',
/bin/echo "init script set to start 'freeswitch -nc -nonat'"
;;
*)
/bin/echo "OK, not using -nonat option."
;;
esac
/bin/echo
/usr/sbin/update-rc.d -f freeswitch defaults
fi
/bin/echo
#don't do this. If freeswitch is a machine name, it really screws this test. It

#won't hurt to adduser a second time anyhow.
#/bin/grep freeswitch /etc/passwd > /dev/null
#if [ $? -eq 0 ]; then
#user already exists
#
/bin/echo "FreeSWITCH user already exists, skipping..."
#else
/bin/echo "adding freeswitch user"
/usr/sbin/adduser --disabled-password --quiet --system \
--home /usr/local/freeswitch \
--gecos "FreeSWITCH Voice Platform" --ingroup daemon \
freeswitch
if [ $? -ne 0 ]; then
/bin/echo "ERROR: Failed adding freeswitch user."
exit 1
fi
#fi
/usr/sbin/adduser freeswitch audio

/usr/sbin/groupadd freeswitch

#dialout for dahdi
/usr/sbin/adduser freeswitch dialout
fi
/bin/chown -R freeswitch:daemon /usr/local/freeswitch/
/bin/echo "removing 'other' permissions on freeswitch"

/bin/chmod -R o-rwx /usr/local/freeswitch/
/bin/echo
cd /usr/local/
/bin/chown -R freeswitch:daemon /usr/local/freeswitch
/bin/echo "FreeSWITCH directories now owned by freeswitch.daemon"
/usr/bin/find freeswitch -type d -exec /bin/chmod u=rwx,g=srx,o= {} \;
/bin/echo "FreeSWITCH directories now sticky group. This will cause any files created"
/bin/echo " to default to the daemon group so FreeSWITCH can read them"
/bin/echo
#/bin/echo "removing /opt blindly (hope nothing is there) and linking it"
#/bin/echo " to /usr/local so FusionPBX won't complain"
#Opt might have been created due to a type in adduser freeswitch (home was /opt)
check...
#this looks to be the case.
#the latest FusionBPX is correctly detecting /usr/local/freeswitch
# probably always did.
#let's try removing opt altogether...
#/bin/echo
/bin/ln -s /usr/local/freeswitch/bin/fs_cli /usr/local/bin/
#if [ $DEBUG -eq 1 ]; then

#
/bin/echo "FreeSWITCH was installed to /usr/local."
/bin/echo " normally we don't want to see /opt"
/bin/echo " since FusionPBX. tries to find it"
/bin/echo " and you end up with having to symlink"
/bin/echo " /usr/local/freeswitch to /opt/freeswitch"
/bin/echo
/bin/echo " It would be easier to blow /opt away; but"
/bin/echo " this may not be a fresh Ubuntu install."
/bin/echo
read -p "Can I 'rm -Rf /opt (Y/n)? " RMOPT
#fi
#case "$RMOPT" in
#[Yy]*)
#
/bin/rm -Rf /opt
#;;
#*)
#/bin/echo "OK, linking /usr/local/freeswitch to /opt/freeswitch"
#/bin/ln -s /usr/local/freeswitch /opt/freeswitch
#;;
#esac

/bin/echo
/bin/echo "Press Enter to continue (check for errors)"
read
fi
#-----------------------# enable modules.conf.xml

#-----------------------/bin/grep 'enable_modules' /tmp/install_fusion_status > /dev/null
if [ $? -eq 0 ]; then
/bin/echo "Modules.conf.xml Already enabled"
else
enable_modules
#check exit status
if [ $? -ne 0 ]; then
/bin/echo "ERROR: Failed to enable modules in modules.conf.xml."
exit 1
else
/bin/echo "enable_modules" >> /tmp/install_fusion_status
fi
fi
/bin/echo
fi
#----------------#Setup logrotate
#----------------#
if [ -a /etc/logrotate.d/freeswitch ]; then
if [ -a /etc/cron.daily/freeswitch_log_rotation ]; then
/bin/echo "Logrotate for FreeSWITCH Already Done!"
#call log script creation function

freeswitch_logfiles
fi
#----------------#harden FreeSWITCH
#----------------/bin/echo -ne "HARDENING"
sleep 1
/bin/echo -ne " ."
sleep 1
/bin/echo -ne " ."
sleep 1
/bin/echo -ne " ."
/usr/bin/apt-get -y install fail2ban

/bin/echo
/bin/echo "Checking log-auth-failures"
/bin/grep log-auth-failures /usr/local/freeswitch/conf/sip_profiles/internal.xml > /dev/null
if [ $? -eq 0 ]; then
#see if it's uncommented
/bin/grep log-auth-failures /usr/local/freeswitch/conf/sip_profiles/internal.xml |
/bin/grep ' "--mode=relink gcc -lgnutls"
in /usr/src/freeswitch/src/mod/endpoints/mod_dingaling/mod_dingaling.la
appears to be an ubuntu problem....
#v4.3 2010 December 22

#
under case upgrade-freeswitch, variables were not set properly. It upgraded fusionpbx..
fixed.
#
done: fail2ban error fixed. removed associated text
done: have install check for /etc/fail2ban. reinstall (as in from iso) duplicates some txt
done: remove or fix fusionpbx upgrade code. it either needs to log in
#
user
and then update and run the schema upgrade. or get rid of it. Fixed by prompting the
to open a browser window, and warn.
done: get logrotate working... let's not fill the disk.
stop/start freeswitch for an upgrade, and an install...

#
made some changes so the text flows correctly now that we use curl
# to do install.php.
# sent curl output to dev null..
# added apt-get update before we install apache since remastersys removes apt data
# stopping FS before FusionPBX install, and starting afteward.
# changed license to WAF v1

# changing cd sounds (48/32/16/8khz) down to hd sounds (16/8Kkhz)
#v4 2010 December 14

# now install-fusion|install-freeswitch|upgrade...
# also adding curl commands to finish fusionpbx install.
#v3 adding fail2ban et al.

# adds arrays to process the modules. should make this much easier to edit.
#
just make additions to modules_add
This should work fine (even on a 2nd run).

# was first cut

Upload

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Upload

Uploaded by

Copyright:

Available Formats

#!

LICENSE=$( cat << DELIM

Gill Abada <ga@steadfasttelecom.com>

# for mysql set m. for sqlite set s. for postgresql set p

# for postgresql v 9.0 (from ppa) set to 9

# to start FreeSWITCH with -nonat option set SETNONAT to y

# rm -Rf /opt? A default install doesn't have /opt so no worries

# use freedtm/dahdi? y/n

#below is a list of modules we want to add to provide functionality for FusionPBX

formats/mod_file_string languages/mod_spidermonkey languages/mod_lua say/mod_say_en

#right now, make -j not working. see: jira FS-3005

#used for Apache

#full path required

<param name="core-db-dsn" value="pgsql://hostaddr=127.0.0.1 dbname=freeswitch

/bin/echo "setting callcenter.conf.xml"

<param name="odbc-dsn" value="\$\${dsn}"/>

/bin/echo "setting fifo.conf.xml"

<param name="odbc-dsn" value="\$\${dsn}"/>

/bin/echo "setting internal.conf.xml"

<param name="odbc-dsn" value="\$\${dsn}"/>

/bin/echo "setting external.conf.xml"

<param name="odbc-dsn" value="\$\${dsn}"/>

/bin/echo "setting db.conf.xml"

<param name="odbc-dsn" value="\$\${dsn}"/>

#don't forget to escape 'DELIM'. otherwise the $fastcgi part

# Disable viewing .htaccess & .htpassword & .db

if (\$uri !~* ^.*provision.*$) {

# Disable viewing .htaccess & .htpassword & .db

# Disable viewing .htaccess & .htpassword & .db

/bin/echo "document root for nginx is:"

/bin/echo " $WWW_PATH/$GUI_NAME"

#nginx install doesn't create /var/www

/bin/cat > /etc/fail2ban/filter.d/$GUI_NAME.conf <<'DELIM'

be used for standard IP/hostname matching and is only an alias for

/bin/grep -i $GUI_NAME /etc/fail2ban/jail.local > /dev/null

/bin/echo " Fixing..."

/usr/bin/find /usr/local/freeswitch -type f -exec /bin/chmod g+w {} \;

modules_compile=( ${modules_comp_default[*]} ${modules_compile_add[*]} )

#BUILD MODULES.CONF for COMPILER

echo "Now enabling modules for compile in $SRCPATH/modules.conf"

let "index = $index + 1"

#end new way v2

#/bin/echo "found ${modules_compile[$index]}"

${modules_add[$index]} ALREADY ENABLED!"

let "index = $index + 1"

#-------------#end new way v2

/bin/cat > /etc/cron.daily/freeswitch_log_rotation <<'DELIM'

#number of days of logs to keep

$FSPATH/bin/fs_cli -x "fsctl send_sighup" |grep '+OK' >/tmp/rotateFSlogs

/bin/chmod 755 /etc/cron.daily/freeswitch_log_rotation

/bin/echo "Now dropping 10MB limit from FreeSWITCH"

/bin/echo " will work properly."

# <param name="rollover" value="10485760"/>

it is interactive and prompts you about what to install"

auto: tries an automatic install. Get a cup of coffee, this will"

take a while. FOR THE BRAVE!"

/bin/echo " install_fusionpbx option1 option2"

it is interactive and prompts you about what to install"

auto: tries an automatic install. Get a cup of coffee, this will"

take a while. FOR THE BRAVE!"

#--------------------# ENVIRONMENT CHECKS

install_fusionpbx install-both user"

if [ $EUID -ne 0 ]; then

#check for internet connection

if (\$uri !~* ^.provision.$) {

modules_compile=( ${modules_comp_default[]} ${modules_compile_add[]} )