customize

#!/usr/bin/bash
#
# Put customizations to your image in this file.

KUMQUAT_VERSION='v0.1.59'

PATH=/opt/local/gnu/bin:/opt/local/bin:/opt/local/sbin:/usr/bin:/usr/sbin

# Munin plugins
MUNIN_PLUGINS="
	apache_accesses
	apache_processes
	apache_volume
	proftpd
	proftpd_bytes
	proftpd_count
	mysql_queries
	mysql_bytes
"

# Exit if any commands fail
set -o errexit

echo "* Use default python 3.11"
pkg_alternatives manual python311
pkg_alternatives manual py311-pip

echo "* Configuring image specific packages."
mkdir -p /opt/kumquat

echo "* Download and extract kumquat to /opt/kumquat"
curl -L "https://github.com/wiedi/kumquat/archive/${KUMQUAT_VERSION}.tar.gz" | gtar xz -C /opt/kumquat --strip-components=1

echo "* Add kumquat user"
groupadd kumquat
useradd -d /opt/kumquat -c "kumquat user" -s /usr/bin/false -g kumquat kumquat

echo "* Setup permissions for kumquat folder"
chown -R kumquat:www /opt/kumquat

echo "* Install missing dependencies via pip"
gsed -i '/acme.*/d' /opt/kumquat/requirements.txt
gsed -i '/zerorpc.*/d' /opt/kumquat/requirements.txt
gsed -i '/cryptography.*/d' /opt/kumquat/requirements.txt
gsed -i '/mysqlclient.*/d' /opt/kumquat/requirements.txt
pip install -r /opt/kumquat/requirements.txt
pip install --no-deps zerorpc==0.6.3

echo "* Create extra ssl folder for kumquat"
mkdir -p /opt/local/etc/kumquat/ssl

echo "* Setup gunicorn"
mkdir -p /opt/local/etc/gunicorn
svccfg import /tmp/gunicorn.xml

echo "* Setup kumquat backend service"
svccfg import /tmp/kumquat.xml

echo "* Remove unused httpd config files"
HTTPD_CONF_RM="httpd-autoindex.conf
httpd-dav.conf
httpd-default.conf
httpd-info.conf
httpd-languages.conf
httpd-manual.conf
httpd-mpm.conf
httpd-multilang-errordoc.conf
httpd-ssl.conf
httpd-userdir.conf
httpd-vhosts.conf"

for CONF_RM in ${HTTPD_CONF_RM}; do
    rm -f /opt/local/etc/httpd/${CONF_RM}
done

echo "* Change www user to /var/www for cronjobs"
usermod -d /var/www www

echo "* Remove unused mysql stuff from base"
rm -rf /var/mysql/*

echo "* Create ssl folder for httpd"
mkdir /opt/local/etc/httpd/ssl

echo "* Remove phpMyAdmin setup folder"
rm -rf /opt/local/share/phpmyadmin/setup

echo "* Copy default index.html"
cp /tmp/default-index.html /opt/local/share/httpd/htdocs/index.html
rm /tmp/default-index.html

echo "* Copy default proftpd configuration"
cp /tmp/proftpd.conf /opt/local/etc/proftpd.conf
rm /tmp/proftpd.conf

echo "* Create extra logfile folder for proftpd"
mkdir /var/log/proftpd

echo "* Create extra Let's Encrypt user for user account security"
useradd -c "Lets Encrypt SSL certificate service" -b /var -g kumquat -m letsencrypt

echo "* Create Let's Encrypt folders"
mkdir -p /var/letsencrypt/state/
mkdir -p /var/letsencrypt/acme/.well-known/acme-challenge/
touch /var/letsencrypt/acme/.well-known/acme-challenge/.keep

echo "* update Let's Encrypt HOME permissions"
chmod -R 700 /var/letsencrypt/state/
chown -R letsencrypt:kumquat /var/letsencrypt/

echo "* Activate munin plugins"
/opt/core/bin/munin-node-plugins ${MUNIN_PLUGINS}

echo "* Cleanup home/admin because of delegate dataset usage"
rm -rf /home/admin

echo "* Cleaning up"
rm -rf /root/*
sm-prepare-image -y