gentoo.lib.php 55.3 KB
Newer Older
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
<?php

/*
Copyright (c) 2007, Till Brehm, projektfarm Gmbh
All rights reserved.

Redistribution and use in source and binary forms, with or without modification,
are permitted provided that the following conditions are met:

    * Redistributions of source code must retain the above copyright notice,
      this list of conditions and the following disclaimer.
    * Redistributions in binary form must reproduce the above copyright notice,
      this list of conditions and the following disclaimer in the documentation
      and/or other materials provided with the distribution.
    * Neither the name of ISPConfig nor the names of its contributors
      may be used to endorse or promote products derived from this software without
      specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/

31
class installer extends installer_base
32
33
{
	public function configure_jailkit()
34
35
36
	{
		global $conf;

37
38
		if (is_dir($conf['jailkit']['config_dir']))
		{
wyrie's avatar
wyrie committed
39
			$jkinit_content = $this->get_template_file($conf['jailkit']['jk_init'], true); //* get contents
40
			$this->write_config_file($conf['jailkit']['config_dir'] . '/' . $conf['jailkit']['jk_init'], $jkinit_content);
41

wyrie's avatar
wyrie committed
42
			$jkchroot_content = $this->get_template_file($conf['jailkit']['jk_chrootsh'], true); //* get contents
43
44
			$this->write_config_file($conf['jailkit']['config_dir'] . '/' . $conf['jailkit']['jk_chrootsh'], $jkchroot_content);
		}
45

wyrie's avatar
wyrie committed
46
47
		$command = 'chown root:root /var/www';
		caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
48
49
	}

50
	public function configure_postfix($options = '')
51
	{
52
		global $conf,$autoinstall;
53
54

		$cf = $conf['postfix'];
55
		$config_dir = $cf['config_dir'];
56

57
		if(!is_dir($config_dir)){
58
59
60
61
62
63
64
65
			$this->error("The postfix configuration directory '$config_dir' does not exist.");
		}

		//* Install virtual mappings
		foreach (glob('tpl/mysql-virtual_*.master') as $filename) {
			$this->process_postfix_config( basename($filename, '.master') );
		}

wyrie's avatar
wyrie committed
66
		//* Changing mode and group of the new created config files.
67
		caselog('chmod o= '.$config_dir.'/mysql-virtual_*.cf* &> /dev/null',
68
69
70
71
			__FILE__, __LINE__, 'chmod on mysql-virtual_*.cf*', 'chmod on mysql-virtual_*.cf* failed');
		caselog('chgrp '.$cf['group'].' '.$config_dir.'/mysql-virtual_*.cf* &> /dev/null',
			__FILE__, __LINE__, 'chgrp on mysql-virtual_*.cf*', 'chgrp on mysql-virtual_*.cf* failed');

wyrie's avatar
wyrie committed
72
		//* Creating virtual mail user and group
73
74
75
76
		$command = 'groupadd -g '.$cf['vmail_groupid'].' '.$cf['vmail_groupname'];
		if (!is_group($cf['vmail_groupname'])) {
			caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
		}
77

78
79
		$command = 'useradd -g '.$cf['vmail_groupname'].' -u '.$cf['vmail_userid'].' '.$cf['vmail_username'].' -d '.$cf['vmail_mailbox_base'].' -m';
		if (!is_user($cf['vmail_username'])) {
80
			caselog("$command &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
81
		}
82

83
		//* These postconf commands will be executed on installation and update
Dominik's avatar
Dominik committed
84
		$server_ini_rec = $this->db->queryOneRecord("SELECT config FROM ?? WHERE server_id = ?", $conf["mysql"]["database"].'.server', $conf['server_id']);
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
		$server_ini_array = ini_to_array(stripslashes($server_ini_rec['config']));
		unset($server_ini_rec);

		//* If there are RBL's defined, format the list and add them to smtp_recipient_restrictions to prevent removeal after an update
		$rbl_list = '';
		if (@isset($server_ini_array['mail']['realtime_blackhole_list']) && $server_ini_array['mail']['realtime_blackhole_list'] != '') {
			$rbl_hosts = explode(",", str_replace(" ", "", $server_ini_array['mail']['realtime_blackhole_list']));
			foreach ($rbl_hosts as $key => $value) {
				$rbl_list .= ", reject_rbl_client ". $value;
			}
		}
		unset($rbl_hosts);

		//* If Postgrey is installed, configure it
		$greylisting = '';
		if($conf['postgrey']['installed'] == true) {
			$greylisting = ', check_recipient_access mysql:/etc/postfix/mysql-virtual_policy_greylist.cf';
		}
		
		$reject_sender_login_mismatch = '';
		if(isset($server_ini_array['mail']['reject_sender_login_mismatch']) && ($server_ini_array['mail']['reject_sender_login_mismatch'] == 'y')) {
			$reject_sender_login_mismatch = ', reject_authenticated_sender_login_mismatch';
		}
		unset($server_ini_array);
		
110
111
112
113
		$postconf_placeholders = array('{config_dir}' => $config_dir,
			'{vmail_mailbox_base}' => $cf['vmail_mailbox_base'],
			'{vmail_userid}' => $cf['vmail_userid'],
			'{vmail_groupid}' => $cf['vmail_groupid'],
114
115
116
117
			'{rbl_list}' => $rbl_list,
			'{greylisting}' => $greylisting,
			'{reject_slm}' => $reject_sender_login_mismatch,
		);
118
119
120
121
122

		$postconf_tpl = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_postfix.conf.master', 'tpl/gentoo_postfix.conf.master');
		$postconf_tpl = strtr($postconf_tpl, $postconf_placeholders);
		$postconf_commands = array_filter(explode("\n", $postconf_tpl)); // read and remove empty lines

123
124
		//* These postconf commands will be executed on installation only
		if($this->is_update == false) {
125
126
127
128
129
			$postconf_commands = array_merge($postconf_commands, array(
					'myhostname = '.$conf['hostname'],
					'mydestination = '.$conf['hostname'].', localhost, localhost.localdomain',
					'mynetworks = 127.0.0.0/8 [::1]/128'
				));
130
		}
131

wyrie's avatar
wyrie committed
132
		//* Create the header and body check files
133
134
135
136
		touch($config_dir.'/header_checks');
		touch($config_dir.'/mime_header_checks');
		touch($config_dir.'/nested_header_checks');
		touch($config_dir.'/body_checks');
137
138


wyrie's avatar
wyrie committed
139
		//* Make a backup copy of the main.cf file
140
		copy($config_dir.'/main.cf', $config_dir.'/main.cf~');
141

wyrie's avatar
wyrie committed
142
		//* Executing the postconf commands
143
144
		foreach($postconf_commands as $cmd) {
			$command = "postconf -e '$cmd'";
wyrie's avatar
wyrie committed
145
			caselog($command.' &> /dev/null', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command);
146
		}
147

wyrie's avatar
wyrie committed
148
		//* Create the SSL certificate
149
		if (!stristr($options, 'dont-create-certs'))
150
		{
Till Brehm's avatar
Till Brehm committed
151
152
			if(AUTOINSTALL){
				$command = 'cd '.$config_dir.'; '
153
					."openssl req -new -subj '/C=".escapeshellcmd($autoinstall['ssl_cert_country'])."/ST=".escapeshellcmd($autoinstall['ssl_cert_state'])."/L=".escapeshellcmd($autoinstall['ssl_cert_locality'])."/O=".escapeshellcmd($autoinstall['ssl_cert_organisation'])."/OU=".escapeshellcmd($autoinstall['ssl_cert_organisation_unit'])."/CN=".escapeshellcmd($autoinstall['ssl_cert_common_name'])."' -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509";
Till Brehm's avatar
Till Brehm committed
154
155
			} else {
				$command = 'cd '.$config_dir.'; '
156
					.'openssl req -new -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509';
Till Brehm's avatar
Till Brehm committed
157
			}
158
			exec($command);
159

160
161
162
			$command = 'chmod o= '.$config_dir.'/smtpd.key';
			caselog($command.' &> /dev/null', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command);
		}
163

wyrie's avatar
wyrie committed
164
165
166
167
168
		//* We have to change the permissions of the courier authdaemon directory to make it accessible for maildrop.
		$command = 'chmod 755  /var/lib/courier/authdaemon/';
		if (is_dir('/var/lib/courier/authdaemon')) {
			caselog($command.' &> /dev/null', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command);
		}
169

wyrie's avatar
wyrie committed
170
		//* Changing maildrop lines in posfix master.cf
171
172
173
		$configfile = $config_dir.'/master.cf';
		$content = rf($configfile);

174
175
176
177
178
		$content = preg_replace('/^#?maildrop/m', 'maildrop', $content);
		$content = preg_replace('/^#?(\s+)flags=DRhu user=vmail argv=\/usr\/bin\/maildrop -d/m',
			'$1flags=DRhu user=vmail argv=/usr/bin/maildrop -d vmail \${extension} \${recipient} \${user} \${nexthop} \${sender}',
			$content);

179
		$this->write_config_file($configfile, $content);
180

wyrie's avatar
wyrie committed
181
		//* Writing the Maildrop mailfilter file
182
		$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/mailfilter.master', 'tpl/mailfilter.master');
183
		$content = str_replace('{dist_postfix_vmail_mailbox_base}', $cf['vmail_mailbox_base'], $content);
184

185
		$this->write_config_file($cf['vmail_mailbox_base'].'/.mailfilter', $content);
186

wyrie's avatar
wyrie committed
187
		//* Create the directory for the custom mailfilters
188
		if (!is_dir($cf['vmail_mailbox_base'].'/mailfilters'))
189
190
		{
			$command = 'mkdir '.$cf['vmail_mailbox_base'].'/mailfilters';
wyrie's avatar
wyrie committed
191
			caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
192
		}
193
194
195
196
197

		//* postfix-dkim
		$full_file_name=$config_dir.'/tag_as_originating.re';
		if(is_file($full_file_name)) {
			copy($full_file_name, $config_dir.$configfile.'~');
198
199
200
201
202
203
204
205
206
		}
		$this->write_config_file($full_file_name, '/^/ FILTER amavis:[127.0.0.1]:10026');

		$full_file_name=$config_dir.'/tag_as_foreign.re';
		if(is_file($full_file_name)) {
			copy($full_file_name, $config_dir.$configfile.'~');
		}
		$this->write_config_file($full_file_name, '/^/ FILTER amavis:[127.0.0.1]:10024');

wyrie's avatar
wyrie committed
207
		//* Chmod and chown the .mailfilter file
208
209
		$command = 'chown -R '.$cf['vmail_username'].':'.$cf['vmail_groupname'].' '.$cf['vmail_mailbox_base'].'/.mailfilter';
		caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
210

211
212
		$command = 'chmod -R 600 '.$cf['vmail_mailbox_base'].'/.mailfilter';
		caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
213

214
	}
215
216

	public function configure_saslauthd()
217
218
	{
		global $conf;
219

wyrie's avatar
wyrie committed
220
		$content = $this->get_template_file('sasl_smtpd.conf', true, true); //* get contents & insert db cred
221
		$this->write_config_file($conf['saslauthd']['config_dir'].'/smtpd.conf', $content);
222

wyrie's avatar
wyrie committed
223
224
		//* Edit the file saslauthd config file
		$content = rf($conf['saslauthd']['config_file']);
225
		$content = preg_replace('/(?<=\n)SASLAUTHD_OPTS="\$\{SASLAUTHD_OPTS\}[^"]+"/', 'SASLAUTHD_OPTS="${SASLAUTHD_OPTS} -a pam -r -c -s 128 -t 30 -n 5"', $content);
226

wyrie's avatar
wyrie committed
227
		$this->write_config_file($conf['saslauthd']['config_file'], $content);
228
	}
229

230
	public function configure_courier()
231
232
233
	{
		global $conf;

wyrie's avatar
wyrie committed
234
235
		//* authmysqlrc
		$content = $this->get_template_file('authmysqlrc', true, true); //* get contents & insert db cred
236
		$this->write_config_file($conf['courier']['config_dir'].'/authmysqlrc', $content);
237

wyrie's avatar
wyrie committed
238
		//* authdaemonrc
239
240
241
242
243
		$configfile = $conf['courier']['config_dir'].'/authdaemonrc';

		$content = rf($configfile);
		$content = preg_replace('/(?<=\n)authmodulelist="[^"]+"/', "authmodulelist=\"authmysql\"", $content);
		$this->write_config_file($configfile, $content);
244

wyrie's avatar
wyrie committed
245
246
247
		//* create certificates
		$command = 'mkimapdcert';
		caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
248

wyrie's avatar
wyrie committed
249
		$command = 'mkpop3dcert';
250
		caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
251
252
253
254
255
256
	}

	public function configure_dovecot()
	{
		global $conf;

Dominik Müller's avatar
Dominik Müller committed
257
		$virtual_transport = 'dovecot';
258
259

		$configure_lmtp = false;
Dominik Müller's avatar
Dominik Müller committed
260
261
262
		
		// check if virtual_transport must be changed
		if ($this->is_update) {
263
			$tmp = $this->db->queryOneRecord("SELECT * FROM ?? WHERE server_id = ?", $conf["mysql"]["database"].".server", $conf['server_id']);
Dominik Müller's avatar
Dominik Müller committed
264
265
266
267
268
			$ini_array = ini_to_array(stripslashes($tmp['config']));
			// ini_array needs not to be checked, because already done in update.php -> updateDbAndIni()
			
			if(isset($ini_array['mail']['mailbox_virtual_uidgid_maps']) && $ini_array['mail']['mailbox_virtual_uidgid_maps'] == 'y') {
				$virtual_transport = 'lmtp:unix:private/dovecot-lmtp';
269
				$configure_lmtp = true;
Dominik Müller's avatar
Dominik Müller committed
270
271
272
			}
		}

273
		$config_dir = $conf['postfix']['config_dir'];
274
		//* Configure master.cf and add a line for deliver
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
		if ($this->postfix_master()) {
			exec ("postconf -M dovecot.unix", $out, $ret);
			$add_dovecot_service = @($out[0]=='')?true:false;
		} else { //* fallback - postfix < 2.9
			$content = rf($config_dir.'/master.cf');
			$add_dovecot_service = @(!stristr($content, "dovecot/deliver"))?true:false;
		}
		if($add_dovecot_service) {
			//* backup
			if(is_file($config_dir.'/master.cf')){
				copy($config_dir.'/master.cf', $config_dir.'/master.cf~2');
			}
			if(is_file($config_dir.'/master.cf~')){
				chmod($config_dir.'/master.cf~2', 0400);
			}
			//* Configure master.cf and add a line for deliver
			$content = rf($conf["postfix"]["config_dir"].'/master.cf');
Florian Schaal's avatar
Florian Schaal committed
292
			$deliver_content = 'dovecot   unix  -       n       n       -       -       pipe'."\n".'  flags=DROhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${user}@${nexthop}';
293
			af($config_dir.'/master.cf', $deliver_content);
294
295
			unset($content);
			unset($deliver_content);
wyrie's avatar
wyrie committed
296
		}
297

wyrie's avatar
wyrie committed
298
299
		//* Reconfigure postfix to use dovecot authentication
		$postconf_commands = array (
300
			'dovecot_destination_recipient_limit = 1',
Dominik Müller's avatar
Dominik Müller committed
301
			'virtual_transport = '.$virtual_transport,
302
303
			'smtpd_sasl_type = dovecot',
			'smtpd_sasl_path = private/auth'
wyrie's avatar
wyrie committed
304
		);
305

wyrie's avatar
wyrie committed
306
		//* Make a backup copy of the main.cf file
307
308
309
310
		copy($conf['postfix']['config_dir'].'/main.cf', $conf['postfix']['config_dir'].'/main.cf~3');

		//* Executing the postconf commands
		foreach($postconf_commands as $cmd)
wyrie's avatar
wyrie committed
311
312
313
314
		{
			$command = "postconf -e '$cmd'";
			caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
		}
315

316
		$config_dir = $conf['dovecot']['config_dir'];
wyrie's avatar
wyrie committed
317
318
319
320
		//* copy dovecot.conf
		$configfile = $config_dir.'/dovecot.conf';
		$content = $this->get_template_file('dovecot.conf', true);
		$this->write_config_file($configfile, $content);
321

322
323
324
325
326
		//* dovecot-lmtpd
		if($configure_lmtp) {
			replaceLine($config_dir.'/'.$configfile, 'protocols = imap pop3', 'protocols = imap pop3 lmtp', 1, 0);
		}

wyrie's avatar
wyrie committed
327
328
329
330
		//* dovecot-sql.conf
		$configfile = $config_dir.'/dovecot-sql.conf';
		$content = $this->get_template_file('debian_dovecot-sql.conf', true, true);
		$this->write_config_file($configfile, $content);
331
332
	}

333
	public function configure_spamassassin()
334
	{
335
		return true;
336
337
	}

338
	public function configure_getmail()
339
	{
340
		global $conf;
341

342
		$config_dir = $conf['getmail']['config_dir'];
343

344
		if (!is_dir($config_dir)) {
wyrie's avatar
wyrie committed
345
			exec('mkdir -p '.escapeshellcmd($config_dir));
346
347
348
349
350
351
		}

		$command = "useradd -d $config_dir ".$conf['getmail']['user'];
		if (!is_user('getmail')) {
			caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
		}
352

353
354
		$command = "chown -R getmail $config_dir";
		caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
355

356
357
		$command = "chmod -R 700 $config_dir";
		caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
358

wyrie's avatar
wyrie committed
359
		//* Getmail will be run from cron. In order to have access to cron the getmail user needs to be part of the cron group.
360
361
362
		$command = "gpasswd -a getmail " . $conf['cron']['group'];
		caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	}
363
364
365

	public function configure_amavis()
	{
366
		global $conf;
367

wyrie's avatar
wyrie committed
368
		//* Amavisd-new user config file
369
370
		$conf_file = 'amavisd-ispconfig.conf';
		$conf_path = dirname($conf['amavis']['config_file']) . '/' . $conf_file;
371

wyrie's avatar
wyrie committed
372
		$content = $this->get_template_file($conf_file, true, true); //* get contents & insert db cred
373
		$this->write_config_file($conf_path, $content);
374

wyrie's avatar
wyrie committed
375
		//* Activate config directory in default file
376
		$amavis_conf = rf($conf['amavis']['config_file']);
377
		if (stripos($amavis_conf, $conf_path) === false)
378
		{
wyrie's avatar
wyrie committed
379
			$amavis_conf = preg_replace('/^(1;.*)$/m', "include_config_files('$conf_path');\n$1", $amavis_conf);
380
381
			$this->write_config_file($conf['amavis']['config_file'], $amavis_conf);
		}
382

wyrie's avatar
wyrie committed
383
		//* Adding the amavisd commands to the postfix configuration
384
385
386
387
		$postconf_commands = array (
			'content_filter = amavis:[127.0.0.1]:10024',
			'receive_override_options = no_address_mappings'
		);
388
389

		foreach($postconf_commands as $cmd) {
390
			$command = "postconf -e '$cmd'";
wyrie's avatar
wyrie committed
391
			caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
392
		}
393

394
395
396
397
398
399
400
401
402
403
404
405
406
407
		$config_dir = $conf['postfix']['config_dir'];

		// Adding amavis-services to the master.cf file if the service does not already exists
		if ($this->postfix_master()) {
			exec ("postconf -M amavis.unix", $out, $ret);
			$add_amavis = @($out[0]=='')?true:false;
			unset($out);
			exec ("postconf -M 127.0.0.1:10025.inet", $out, $ret);
			$add_amavis_10025 = @($out[0]=='')?true:false;
			unset($out);
			exec ("postconf -M 127.0.0.1:10027.inet", $out, $ret);
			$add_amavis_10027 = @($out[0]=='')?true:false;
			unset($out);
		} else { //* fallback - postfix < 2.9
408
			$content = rf($conf['postfix']['config_dir'].'/master.cf');
409
410
411
			$add_amavis = @(!preg_match('/^amavis\s+unix\s+/m', $content))?true:false;
			$add_amavis_10025 = @(!preg_match('/^127.0.0.1:10025\s+/m', $content))?true:false;
			$add_amavis_10027 = @(!preg_match('/^127.0.0.1:10027\s+/m', $content))?true:false;
412
		}
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432

		if ($add_amavis || $add_amavis_10025 || $add_amavis_10027) {
			//* backup master.cf
			if(is_file($config_dir.'/master.cf')) copy($config_dir.'/master.cf', $config_dir.'/master.cf~');
			// adjust amavis-config
			if($add_amavis) {
				$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis.master', 'tpl/master_cf_amavis.master');
				af($config_dir.'/master.cf', $content);
				unset($content);
			}
			if ($add_amavis_10025) {
				$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10025.master', 'tpl/master_cf_amavis10025.master');
				af($config_dir.'/master.cf', $content);
				unset($content);
			}
			if ($add_amavis_10027) {
				$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/master_cf_amavis10027.master', 'tpl/master_cf_amavis10027.master');
				af($config_dir.'/master.cf', $content);
				unset($content);
			}
433
		}
434

wyrie's avatar
wyrie committed
435
		//* Add the clamav user to the amavis group
436
		exec('usermod -a -G amavis clamav');
437
438
439
440
	}

	public function configure_pureftpd()
	{
441
		global $conf;
442

443
		//* configure pure-ftpd for MySQL authentication against the ispconfig database
wyrie's avatar
wyrie committed
444
445
		$content = $this->get_template_file('pureftpd_mysql.conf', true, true); //* get contents & insert db cred
		$content = str_replace('{server_id}', $conf['server_id'], $content);
446

447
		$this->write_config_file($conf['pureftpd']['mysql_config_file'], $content, 600, 'root', 'root');
448

wyrie's avatar
wyrie committed
449
		//* enable pure-ftpd and server settings
450
		$content = rf($conf["pureftpd"]["config_file"]);
451

452
453
		$content = preg_replace('/#?IS_CONFIGURED="(?:yes|no)"/', 'IS_CONFIGURED="yes"', $content);
		$content = str_replace('AUTH="-l unix"', 'AUTH="-l mysql:'.$conf['pureftpd']['mysql_config_file'].'"', $content);
454

wyrie's avatar
wyrie committed
455
456
		//* Logging defaults to syslog's ftp facility. Override this behaviour for better compatibility with debian/ubuntu
		//* and specify the format.
457
458
459
460
		$logdir = '/var/log/pure-ftpd';
		if (!is_dir($logdir)) {
			mkdir($logdir, 0755, true);
		}
461

wyrie's avatar
wyrie committed
462
		/**
463
464
465
466
467
468
		 * @link http://download.pureftpd.org/pub/pure-ftpd/doc/README
		 * -b brokenclientscompatibility
		 * -A chrooteveryone
		 * -E noanonymous
		 * -O altlog <format>:<log file>
		 * -Z customerproof (Add safe guards against common customer mistakes ie. like chmod 0 on their own files)
469
		 * -D displaydotfiles
wyrie's avatar
wyrie committed
470
		 * -H dontresolve
471
		 */
472
473


wyrie's avatar
wyrie committed
474
		$content = preg_replace('/MISC_OTHER="[^"]+"/', 'MISC_OTHER="-b -A -E -Z -D -H -O clf:'.$logdir.'/transfer.log"', $content);
475

wyrie's avatar
wyrie committed
476
		$this->write_config_file($conf['pureftpd']['config_file'], $content);
477
478
479
	}

	public function configure_powerdns()
480
481
	{
		global $conf;
482

483
		//* Create the database
484
		if(!$this->db->query('CREATE DATABASE IF NOT EXISTS ?? DEFAULT CHARACTER SET ?', $conf['powerdns']['database'], $conf['mysql']['charset'])) {
485
486
			$this->error('Unable to create MySQL database: '.$conf['powerdns']['database'].'.');
		}
487

488
		//* Create the ISPConfig database user in the local database
489
490
		$query = 'GRANT ALL ON ??.* TO ?@?';
		if(!$this->db->query($query, $conf['powerdns']['database'], $conf['mysql']['ispconfig_user'], 'localhost')) {
491
492
			$this->error('Unable to create user for powerdns database Error: '.$this->db->errorMessage);
		}
493

494
495
		//* Reload database privelages
		$this->db->query('FLUSH PRIVILEGES;');
496

497
498
		//* load the powerdns databse dump
		if($conf['mysql']['admin_password'] == '') {
499
500
			caselog("mysql --default-character-set=".$conf['mysql']['charset']." -h '".$conf['mysql']['host']."' -u '".$conf['mysql']['admin_user']."' '".$conf['powerdns']['database']."' < '".ISPC_INSTALL_ROOT."/install/sql/powerdns.sql' &> /dev/null",
				__FILE__, __LINE__, 'read in ispconfig3.sql', 'could not read in powerdns.sql');
501
		} else {
502
503
			caselog("mysql --default-character-set=".$conf['mysql']['charset']." -h '".$conf['mysql']['host']."' -u '".$conf['mysql']['admin_user']."' -p'".$conf['mysql']['admin_password']."' '".$conf['powerdns']['database']."' < '".ISPC_INSTALL_ROOT."/install/sql/powerdns.sql' &> /dev/null",
				__FILE__, __LINE__, 'read in ispconfig3.sql', 'could not read in powerdns.sql');
504
		}
505

506
		//* Create the powerdns config file
wyrie's avatar
wyrie committed
507
		$content = $this->get_template_file('pdns.local', true, true); //* get contents & insert db cred
508
		$content = str_replace('{powerdns_database}', $conf['powerdns']['database'], $content);
509

510
511
		$this->write_config_file($conf["powerdns"]["config_dir"].'/'.$conf["powerdns"]["config_file"], $content, 600, 'root', 'root');

wyrie's avatar
wyrie committed
512
		//* Create symlink to init script to start the correct config file
513
514
515
516
		if( !is_link($conf['init_scripts'].'/'.$conf['powerdns']['init_script']) ) {
			symlink($conf['init_scripts'].'/pdns', $conf['init_scripts'].'/'.$conf['powerdns']['init_script']);
		}
	}
517

wyrie's avatar
wyrie committed
518
519
520
	public function configure_bind() {
		global $conf;

521
522
523
524
		//* Check if the zonefile directory has a slash at the end
		$content=$conf['bind']['bind_zonefiles_dir'];
		if(substr($content, -1, 1) != '/') {
			$content .= '/';
wyrie's avatar
wyrie committed
525
		}
526

wyrie's avatar
wyrie committed
527
528
		//* New default format of named.conf uses views. Check which version the system is using and include our zones file.
		$named_conf = rf($conf['bind']['named_conf_path']);
529
		if (stripos($named_conf, 'include "'.$conf['bind']['named_conf_local_path'].'";') === false)
wyrie's avatar
wyrie committed
530
531
532
533
534
535
		{
			preg_match_all("/(?<=\n)view \"(?:public|internal)\" in \{.*\n\};/Us", $named_conf, $views);
			if (count($views[0]) == 2) {
				foreach ($views[0] as $view) {
					$named_conf = str_replace($view, substr($view, 0, -2)."include \"{$conf['bind']['named_conf_local_path']}\";\n};", $named_conf);
				}
536

wyrie's avatar
wyrie committed
537
538
539
540
541
542
543
				wf($conf['bind']['named_conf_path'], $named_conf);
			}
			else {
				af($conf['bind']['named_conf_path'], 'include "'.$conf['bind']['named_conf_local_path'].'";');
			}
		}
	}
544

545
	public function configure_apache()
546
	{
547
		global $conf;
548

Falko Timme's avatar
Falko Timme committed
549
		if($conf['apache']['installed'] == false) return;
wyrie's avatar
wyrie committed
550
551
552
		//* Create the logging directory for the vhost logfiles
		if (!is_dir($conf['ispconfig_log_dir'].'/httpd')) {
			mkdir($conf['ispconfig_log_dir'].'/httpd', 0755, true);
553
		}
554
555

		if (is_file($conf['suphp']['config_file']))
556
557
		{
			$content = rf($conf['suphp']['config_file']);
558

wyrie's avatar
wyrie committed
559
560
			if (!preg_match('|^x-httpd-suphp=php:/usr/bin/php-cgi$|m', $content))
			{
561
562
				$content = preg_replace('/;Handler for php-scripts/', ";Handler for php-scripts\nx-httpd-suphp=php:/usr/bin/php-cgi", $content);
				$content = preg_replace('/;?umask=\d+/', 'umask=0022', $content);
wyrie's avatar
wyrie committed
563
			}
564

565
566
			$this->write_config_file($conf['suphp']['config_file'], $content);
		}
567

wyrie's avatar
wyrie committed
568
		//* Enable ISPConfig default vhost settings
569
		$default_vhost_path = $conf['apache']['vhost_conf_dir'].'/'.$conf['apache']['vhost_default'];
570
		if (is_file($default_vhost_path))
571
572
		{
			$content = rf($default_vhost_path);
573

574
575
			$content = preg_replace('/^#?\s*NameVirtualHost.*$/m', 'NameVirtualHost *:80', $content);
			$content = preg_replace('/<VirtualHost[^>]+>/', '<VirtualHost *:80>', $content);
576

577
578
			$this->write_config_file($default_vhost_path, $content);
		}
579

wyrie's avatar
wyrie committed
580
		//* Generate default ssl certificates
581
582
583
		if (!is_dir($conf['apache']['ssl_dir'])) {
			mkdir($conf['apache']['ssl_dir']);
		}
584
585

		if ($conf['services']['mail'] == true)
586
587
588
589
590
591
592
593
594
595
		{
			copy($conf['postfix']['config_dir']."/smtpd.key", $conf['apache']['ssl_dir']."/server.key");
			copy($conf['postfix']['config_dir']."/smtpd.cert", $conf['apache']['ssl_dir']."/server.crt");
		}
		else
		{
			if (!is_file($conf['apache']['ssl_dir'] . '/server.crt')) {
				exec("openssl req -new -outform PEM -out {$conf['apache']['ssl_dir']}/server.crt -newkey rsa:2048 -nodes -keyout {$conf['apache']['ssl_dir']}/server.key -keyform PEM -days 365 -x509");
			}
		}
596
597
598



wyrie's avatar
wyrie committed
599
		//* Copy the ISPConfig configuration include
600
601
602
		$tpl = new tpl('apache_ispconfig.conf.master');
		$tpl->setVar('apache_version',getapacheversion());
		
603
		$records = $this->db->queryAllRecords("SELECT * FROM ?? WHERE server_id = ? AND virtualhost = 'y'", $conf['mysql']['master_database'] . '.server_ip', $conf['server_id']);
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
		$ip_addresses = array();
		
		if(is_array($records) && count($records) > 0) {
			foreach($records as $rec) {
				if($rec['ip_type'] == 'IPv6') {
					$ip_address = '['.$rec['ip_address'].']';
				} else {
					$ip_address = $rec['ip_address'];
				}
				$ports = explode(',', $rec['virtualhost_port']);
				if(is_array($ports)) {
					foreach($ports as $port) {
						$port = intval($port);
						if($port > 0 && $port < 65536 && $ip_address != '') {
							$ip_addresses[] = array('ip_address' => $ip_address, 'port' => $port);
						}
					}
				}
			}
		}
624
		
Till Brehm's avatar
Till Brehm committed
625
		if(count($ip_addresses) > 0) $tpl->setLoop('ip_adresses',$ip_addresses);
626
627
628

		wf($conf['apache']['vhost_conf_dir'].'/000-ispconfig.conf', $tpl->grab());
		unset($tpl);
629

wyrie's avatar
wyrie committed
630
		//* Gentoo by default does not include .vhost files. Add include line to config file.
631
632
		$content = rf($conf['apache']['config_file']);
		if ( strpos($content, 'Include /etc/apache2/vhosts.d/*.vhost') === false ) {
633
			$content = preg_replace('|(Include /etc/apache2/vhosts.d/\*.conf)|', "$1\nInclude /etc/apache2/vhosts.d/*.vhost", $content);
634
		}
635

636
		$this->write_config_file($conf['apache']['config_file'], $content);
637

wyrie's avatar
wyrie committed
638
		//* make sure that webalizer finds its config file when it is directly in /etc
639
		if(is_file('/etc/webalizer.conf') && !is_dir('/etc/webalizer'))
640
641
642
643
		{
			mkdir('/etc/webalizer', 0755);
			symlink('/etc/webalizer.conf', '/etc/webalizer/webalizer.conf');
		}
644
645
646
647
648
649

		if(is_file('/etc/webalizer/webalizer.conf')) //* Change webalizer mode to incremental
			{
			replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0);
			replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental     yes', 0, 0);
			replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName     webalizer.hist', 0, 0);
650
		}
651

wyrie's avatar
wyrie committed
652
		//* add a sshusers group
653
		if (!is_group('sshusers'))
654
655
656
657
		{
			$command = 'groupadd sshusers';
			caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
		}
658
659
660
	}

	public function configure_apps_vhost()
661
662
	{
		global $conf;
663

664
		//* Create the ispconfig apps vhost user and group
665
		if($conf['apache']['installed'] == true){
Falko Timme's avatar
Falko Timme committed
666
667
668
			$apps_vhost_user = escapeshellcmd($conf['web']['apps_vhost_user']);
			$apps_vhost_group = escapeshellcmd($conf['web']['apps_vhost_group']);
			$install_dir = escapeshellcmd($conf['web']['website_basedir'].'/apps');
669

Falko Timme's avatar
Falko Timme committed
670
671
672
673
			$command = 'groupadd '.$apps_vhost_user;
			if ( !is_group($apps_vhost_group) ) {
				caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
			}
674

Falko Timme's avatar
Falko Timme committed
675
676
677
678
			$command = "useradd -g '$apps_vhost_group' -d $install_dir $apps_vhost_group";
			if ( !is_user($apps_vhost_user) ) {
				caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
			}
679

Falko Timme's avatar
Falko Timme committed
680
681
			$command = 'adduser '.$conf['apache']['user'].' '.$apps_vhost_group;
			caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
682

683
			if(!@is_dir($install_dir)){
Falko Timme's avatar
Falko Timme committed
684
				mkdir($install_dir, 0755, true);
685
686
			} else {
				chmod($install_dir, 0755);
Falko Timme's avatar
Falko Timme committed
687
688
689
			}
			chown($install_dir, $apps_vhost_user);
			chgrp($install_dir, $apps_vhost_group);
690

Falko Timme's avatar
Falko Timme committed
691
692
693
694
			//* Copy the apps vhost file
			$vhost_conf_dir = $conf['apache']['vhost_conf_dir'];
			$vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir'];
			$apps_vhost_servername = ($conf['web']['apps_vhost_servername'] == '') ? '' : 'ServerName '.$conf['web']['apps_vhost_servername'];
695

Falko Timme's avatar
Falko Timme committed
696
697
			//* Dont just copy over the virtualhost template but add some custom settings
			$content = $this->get_template_file('apache_apps.vhost', true);
698

Falko Timme's avatar
Falko Timme committed
699
700
701
702
703
			$content = str_replace('{apps_vhost_ip}', $conf['web']['apps_vhost_ip'], $content);
			$content = str_replace('{apps_vhost_port}', $conf['web']['apps_vhost_port'], $content);
			$content = str_replace('{apps_vhost_dir}', $conf['web']['website_basedir'].'/apps', $content);
			$content = str_replace('{website_basedir}', $conf['web']['website_basedir'], $content);
			$content = str_replace('{apps_vhost_servername}', $apps_vhost_servername, $content);
704

Falko Timme's avatar
Falko Timme committed
705
706
707
708
709
710
			//* comment out the listen directive if port is 80 or 443
			if($conf['web']['apps_vhost_ip'] == 80 or $conf['web']['apps_vhost_ip'] == 443) {
				$content = str_replace('{vhost_port_listen}', '#', $content);
			} else {
				$content = str_replace('{vhost_port_listen}', '', $content);
			}
711

Falko Timme's avatar
Falko Timme committed
712
			$this->write_config_file("$vhost_conf_dir/apps.vhost", $content);
713
714

			//if ( !is_file($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter') )
715
			//{
716
717
718
719
720
721
722
723
724
			$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apache_apps_fcgi_starter.master', 'tpl/apache_apps_fcgi_starter.master');
			$content = str_replace('{fastcgi_bin}', $conf['fastcgi']['fastcgi_bin'], $content);
			$content = str_replace('{fastcgi_phpini_path}', $conf['fastcgi']['fastcgi_phpini_path'], $content);
			mkdir($conf['web']['website_basedir'].'/php-fcgi-scripts/apps', 0755, true);
			//copy('tpl/apache_apps_fcgi_starter.master',$conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter');
			wf($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter', $content);
			exec('chmod +x '.$conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter');
			exec('chown -R ispapps:ispapps '.$conf['web']['website_basedir'].'/php-fcgi-scripts/apps');

725
			//}
Falko Timme's avatar
Falko Timme committed
726
		}
727
		if($conf['nginx']['installed'] == true){
Falko Timme's avatar
Falko Timme committed
728
729
730
731
732
733
734
735
736
737
738
739
740
741
			$apps_vhost_user = escapeshellcmd($conf['web']['apps_vhost_user']);
			$apps_vhost_group = escapeshellcmd($conf['web']['apps_vhost_group']);
			$install_dir = escapeshellcmd($conf['web']['website_basedir'].'/apps');

			$command = 'groupadd '.$apps_vhost_user;
			if(!is_group($apps_vhost_group)) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");

			$command = 'useradd -g '.$apps_vhost_group.' -d '.$install_dir.' '.$apps_vhost_group;
			if(!is_user($apps_vhost_user)) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");


			$command = 'adduser '.$conf['nginx']['user'].' '.$apps_vhost_group;
			caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");

Falko Timme's avatar
Falko Timme committed
742
743
744
745
746
			if(!@is_dir($install_dir)){
				mkdir($install_dir, 0755, true);
			} else {
				chmod($install_dir, 0755);
			}
Falko Timme's avatar
Falko Timme committed
747
748
749
750
751
752
753
754
755
			chown($install_dir, $apps_vhost_user);
			chgrp($install_dir, $apps_vhost_group);

			//* Copy the apps vhost file
			$vhost_conf_dir = $conf['nginx']['vhost_conf_dir'];
			$vhost_conf_enabled_dir = $conf['nginx']['vhost_conf_enabled_dir'];
			$apps_vhost_servername = ($conf['web']['apps_vhost_servername'] == '')?'_':$conf['web']['apps_vhost_servername'];

			// Dont just copy over the virtualhost template but add some custom settings
756
			$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/nginx_apps.vhost.master', 'tpl/nginx_apps.vhost.master');
757

Falko Timme's avatar
Falko Timme committed
758
759
760
761
762
			if($conf['web']['apps_vhost_ip'] == '_default_'){
				$apps_vhost_ip = '';
			} else {
				$apps_vhost_ip = $conf['web']['apps_vhost_ip'].':';
			}
763

764
			$socket_dir = escapeshellcmd($conf['nginx']['php_fpm_socket_dir']);
765
			if(substr($socket_dir, -1) != '/') $socket_dir .= '/';
766
767
			if(!is_dir($socket_dir)) exec('mkdir -p '.$socket_dir);
			$fpm_socket = $socket_dir.'apps.sock';
768
			$cgi_socket = escapeshellcmd($conf['nginx']['cgi_socket']);
Falko Timme's avatar
Falko Timme committed
769
770
771
772
773

			$content = str_replace('{apps_vhost_ip}', $apps_vhost_ip, $content);
			$content = str_replace('{apps_vhost_port}', $conf['web']['apps_vhost_port'], $content);
			$content = str_replace('{apps_vhost_dir}', $conf['web']['website_basedir'].'/apps', $content);
			$content = str_replace('{apps_vhost_servername}', $apps_vhost_servername, $content);
774
775
			//$content = str_replace('{fpm_port}', ($conf['nginx']['php_fpm_start_port']+1), $content);
			$content = str_replace('{fpm_socket}', $fpm_socket, $content);
776
			$content = str_replace('{cgi_socket}', $cgi_socket, $content);
Falko Timme's avatar
Falko Timme committed
777
778

			wf($vhost_conf_dir.'/apps.vhost', $content);
779

Falko Timme's avatar
Falko Timme committed
780
781
			// PHP-FPM
			// Dont just copy over the php-fpm pool template but add some custom settings
782
			$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apps_php_fpm_pool.conf.master', 'tpl/apps_php_fpm_pool.conf.master');
Falko Timme's avatar
Falko Timme committed
783
			$content = str_replace('{fpm_pool}', 'apps', $content);
784
785
			//$content = str_replace('{fpm_port}', ($conf['nginx']['php_fpm_start_port']+1), $content);
			$content = str_replace('{fpm_socket}', $fpm_socket, $content);
Falko Timme's avatar
Falko Timme committed
786
787
788
789
790
791
			$content = str_replace('{fpm_user}', $apps_vhost_user, $content);
			$content = str_replace('{fpm_group}', $apps_vhost_group, $content);
			wf($conf['nginx']['php_fpm_pool_dir'].'/apps.conf', $content);

			//copy('tpl/nginx_ispconfig.vhost.master', "$vhost_conf_dir/ispconfig.vhost");
			//* and create the symlink
Falko Timme's avatar
Falko Timme committed
792
793
			if(@is_link($vhost_conf_enabled_dir.'/apps.vhost')) unlink($vhost_conf_enabled_dir.'/apps.vhost');
			if(!@is_link($vhost_conf_enabled_dir.'/000-apps.vhost')) {
794
				symlink($vhost_conf_dir.'/apps.vhost', $vhost_conf_enabled_dir.'/000-apps.vhost');
Falko Timme's avatar
Falko Timme committed
795
			}
796

797
798
		}
	}
799
800
801

	public function install_ispconfig()
	{
802
		global $conf;
803

804
		$install_dir = $conf['ispconfig_install_dir'];
805
806
807

		//* Create the ISPConfig installation directory
		if(!is_dir($install_dir))
808
809
810
811
		{
			$command = "mkdir $install_dir";
			caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
		}
812

wyrie's avatar
wyrie committed
813
		//* Create a ISPConfig user and group
814
		if (!is_group('ispconfig'))
815
816
817
818
		{
			$command = 'groupadd ispconfig';
			caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
		}
819
820

		if (!is_user('ispconfig'))
821
822
823
824
		{
			$command = "useradd -g ispconfig -d $install_dir ispconfig";
			caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
		}
825

wyrie's avatar
wyrie committed
826
		//* copy the ISPConfig interface part
827
828
		$command = "cp -rf ../interface $install_dir";
		caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
829

wyrie's avatar
wyrie committed
830
		//* copy the ISPConfig server part
831
832
		$command = "cp -rf ../server $install_dir";
		caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
833
		
834
835
836
		//* Make a backup of the security settings
		if(is_file('/usr/local/ispconfig/security/security_settings.ini')) copy('/usr/local/ispconfig/security/security_settings.ini','/usr/local/ispconfig/security/security_settings.ini~');
		
837
838
839
		//* copy the ISPConfig security part
		$command = 'cp -rf ../security '.$install_dir;
		caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
		
		//* Apply changed security_settings.ini values to new security_settings.ini file
		if(is_file('/usr/local/ispconfig/security/security_settings.ini~')) {
			$security_settings_old = ini_to_array(file_get_contents('/usr/local/ispconfig/security/security_settings.ini~'));
			$security_settings_new = ini_to_array(file_get_contents('/usr/local/ispconfig/security/security_settings.ini'));
			if(is_array($security_settings_new) && is_array($security_settings_old)) {
				foreach($security_settings_new as $section => $sval) {
					if(is_array($sval)) {
						foreach($sval as $key => $val) {
							if(isset($security_settings_old[$section]) && isset($security_settings_old[$section][$key])) {
								$security_settings_new[$section][$key] = $security_settings_old[$section][$key];
							}
						}
					}
				}
				file_put_contents('/usr/local/ispconfig/security/security_settings.ini',array_to_ini($security_settings_new));
			}
		}
858
859


wyrie's avatar
wyrie committed
860
		//* Create the config file for ISPConfig interface
861
		$configfile = 'config.inc.php';
wyrie's avatar
wyrie committed
862
		$content = $this->get_template_file($configfile, true, true); //* get contents & insert db cred
863

864
865
866
867
		$content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content);
		$content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content);
		$content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content);
		$content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content);
868
		$content = str_replace('{mysql_master_server_port}', $conf['mysql']['master_port'], $content);
869

870
871
872
		$content = str_replace('{server_id}', $conf['server_id'], $content);
		$content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content);
		$content = str_replace('{language}', $conf['language'], $content);
873
		$content = str_replace('{timezone}', $conf['timezone'], $content);
cfoe's avatar
cfoe committed
874
		$content = str_replace('{theme}', $conf['theme'], $content);
875
		$content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content);
876

877
		$this->write_config_file("$install_dir/interface/lib/$configfile", $content);
878

wyrie's avatar
wyrie committed
879
		//* Create the config file for ISPConfig server
880
		$this->write_config_file("$install_dir/server/lib/$configfile", $content);
881

882
883
		//* Create the config file for remote-actions (but only, if it does not exist, because
		//  the value is a autoinc-value and so changed by the remoteaction_core_module
wyrie's avatar
wyrie committed
884
885
		if (!file_exists($install_dir.'/server/lib/remote_action.inc.php')) {
			$content = '<?php' . "\n" . '$maxid_remote_action = 0;' . "\n" . '?>';
886
			wf($install_dir.'/server/lib/remote_action.inc.php', $content);
wyrie's avatar
wyrie committed
887
		}
888
889

		// Enable the server modules and plugins.
890
891
892
893
894
		// TODO: Implement a selector which modules and plugins shall be enabled.
		$dir = $install_dir.'/server/mods-available/';
		if (is_dir($dir)) {
			if ($dh = opendir($dir)) {
				while (($file = readdir($dh)) !== false) {
895
896
897
					if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') {
						include_once $install_dir.'/server/mods-available/'.$file;
						$module_name = substr($file, 0, -8);
898
899
						$tmp = new $module_name;
						if($tmp->onInstall()) {