[Veraltet] FriBoLi v0.4 (update)

#!/bin/sh

# Update von FriBoLi 0.3 auf FriBoLi 0.41
########################################

# Überflüssiges "Zeugs" entfernen
aptitude remove gdb -y
aptitude remove ppp pppoe pppconfig -y
aptitude remove exim4* mailx -y
aptitude remove klogd sysklogd -y
aptitude remove discover-data mkinitrd-cd -y

# Paketlisten updaten
apt-get update

# System upgraden
apt-get dist-upgrade -y

# jam installieren
aptitude install jam -y

# libstdc++6 installieren
aptitude install libstdc++6 -y

# Apache2 installieren
aptitude install apache2-mpm-prefork libapache2-mod-proxy-html libapache2-mod-php4 -y

# etwas Aufräumen
rm -rf /var/cache/apt/archive/*.deb

# Apache2 Module aktivieren
a2enmod ssl 
a2enmod php4
a2enmod proxy
a2enmod proxy_connect

# Apache2 zusätzliche Ports
echo "Listen 443" >> /etc/apache2/ports.conf

# Apache2 SSL Zertifikate erstellen
mkdir /etc/apache2/ssl
cd /etc/apache2/ssl

# Hier euren DynDNS eintagen!!!
SERVER=ssl.Mein.Dyndns.org
PRIVATE_KEY=$SERVER.private.key
CERTIFICATE_FILE=$SERVER.crt
VALID_DAYS=3650

echo Delete old private key
rm $PRIVATE_KEY
echo Create new private/public-keys without passphrase for server
openssl genrsa -out $PRIVATE_KEY 1024
echo Create selfsigned certificate
rm $CERTIFICATE_FILE

openssl req -new -days $VALID_DAYS -key $PRIVATE_KEY -x509 -out $CERTIFICATE_FILE -subj "/CN=DE/O=FriBoLi/OU=FriBoLi/CN=bofh-debian/emailAddress=<root@localhost>"

echo private-keyfile is $PRIVATE_KEY
echo server-certificate-file is $CERTIFICATE_FILE

# Apache2 Proxymodul konfigurieren
sed 's/Deny from all/#Deny from all/' /etc/apache2/mods-enabled/proxy.conf > /tmp/proxy.tmp
sed 's/#Allow from .your_domain.com/Allow from all/' /tmp/proxy.tmp > /etc/apache2/mods-enabled/proxy.conf
 
# Apache2 ssh Site
FILE=/etc/apache2/sites-enabled/001-ssh-apache2
echo 'NameVirtualHost *:443' > $FILE
echo '<VirtualHost *:443>' >> $FILE
echo 'ServerAdmin webmaster@localhost' >> $FILE
echo '' >> $FILE
echo ' 	<Location />' >> $FILE
echo '		AuthType Basic' >> $FILE
echo '		AuthName "Password Required"' >> $FILE
echo '		AuthUserFile /usr/share/apache2/htaccess/apache-ssh.htaccess' >> $FILE
echo '		require valid-user' >> $FILE
echo '	 </Location>' >> $FILE
echo '' >> $FILE
echo '	SSLEngine on' >> $FILE
echo -n '	SSLCertificateFile /etc/apache2/ssl/' >> $FILE
echo $CERTIFICATE_FILE >> $FILE
echo -n '	SSLCertificateKeyFile /etc/apache2/ssl/' >> $FILE
echo $PRIVATE_KEY >> $FILE
echo '	SSLProtocol all -SSLv2' >> $FILE
echo '' >> $FILE
echo '	CustomLog /var/log/apache2/access-ssh.log combined' >> $FILE
echo '' >> $FILE
echo ' 	ProxyPass / http://localhost:8022/' >> $FILE
echo '	ProxyPassReverse / http://localhost:8022/' >> $FILE
echo '</VirtualHost>' >> $FILE

# Apache2 htaccess erstellen
mkdir /usr/share/apache2/htaccess/
htpasswd -cb /usr/share/apache2/htaccess/apache-ssh.htaccess bofh fritzbox

# Apache2 neustarten
apache2 -k restart

# Ajaxterm einrichten
cd /root
wget http://antony.lesuisse.org/qweb/files/Ajaxterm-0.10.tar.gz
unp Ajaxterm-0.10.tar.gz
mv Ajaxterm-0.10 /usr/local/bin/ajaxterm
cp -af /usr/local/bin/ajaxterm/configure.initd.debian /etc/init.d/ajaxterm
chmod ugo+x /etc/init.d/ajaxterm
sed 's/DAEMON=\%(bin)s\/ajaxterm/DAEMON=\/usr\/local\/bin\/ajaxterm\/ajaxterm.py /' /etc/init.d/ajaxterm > /tmp/ajaxterm.daemon
sed 's/PORT=\%(port)s/PORT=8022/' /tmp/ajaxterm.daemon > /etc/init.d/ajaxterm
chmod ugo+x /etc/init.d/ajaxterm
rm /tmp/ajaxterm.daemon

# Ajaxterm starten
/etc/init.d/ajaxterm start

# Runlevel update
update-rc.d apache2 defaults
update-rc.d ajaxterm defaults