owncloudpie_setup.sh

#!/bin/bash

#  OwncloudPie - Shell script for installing and updating Owncloud on the Raspberry Pi.
# 
#  (c) Copyright 2012  Florian Müller (petrockblock@gmail.com)
# 
#  OwncloudPie homepage: https://github.com/petrockblog/OwncloudPie
# 
#  Permission to use, copy, modify and distribute OwncloudPie in both binary and
#  source form, for non-commercial purposes, is hereby granted without fee,
#  providing that this license information and copyright notice appear with
#  all copies and any derived work.
# 
#  This software is provided 'as-is', without any express or implied
#  warranty. In no event shall the authors be held liable for any damages
#  arising from the use of this software.
# 
#  OwncloudPie is freeware for PERSONAL USE only. Commercial users should
#  seek permission of the copyright holders first. Commercial use includes
#  charging money for OwncloudPie or software derived from OwncloudPie.
# 
#  The copyright holders request that bug fixes and improvements to the code
#  should be forwarded to them so everyone can benefit from the modifications
#  in future versions.
# 
#  Raspberry Pi is a trademark of the Raspberry Pi Foundation.
# 

function printMsg()
{
	echo -e "\n= = = = = = = = = = = = = = = = = = = = =\n$1\n= = = = = = = = = = = = = = = = = = = = =\n"
}

# arg 1: key, arg 2: value, arg 3: file
function ensureKeyValue()
{
    if [[ -z $(egrep -i ";? *$1 = [0-9]*[M]?" $3) ]]; then
        # add key-value pair
        echo "$1 = $2" >> $3
    else
        # replace existing key-value pair
        toreplace=`egrep -i ";? *$1 = [0-9]*[M]?" $3`
        sed $3 -i -e "s|$toreplace|$1 = $2|g"
    fi     
}

# arg 1: key, arg 2: value, arg 3: file
# make sure that a key-value pair is set in file
# key=value
function ensureKeyValueShort()
{
    if [[ -z $(egrep -i "#? *$1\s?=\s?""?[+|-]?[0-9]*[a-z]*"""? $3) ]]; then
        # add key-value pair
        echo "$1=""$2""" >> $3
    else
        # replace existing key-value pair
        toreplace=`egrep -i "#? *$1\s?=\s?""?[+|-]?[0-9]*[a-z]*"""? $3`
        sed $3 -i -e "s|$toreplace|$1=""$2""|g"
    fi     
}

function checkNeededPackages()
{
    doexit=0
    type -P git &>/dev/null && echo "Found git command." || { echo "Did not find git. Try 'sudo apt-get install -y git' first."; doexit=1; }
    type -P dialog &>/dev/null && echo "Found dialog command." || { echo "Did not find dialog. Try 'sudo apt-get install -y dialog' first."; doexit=1; }
    if [[ doexit -eq 1 ]]; then
        exit 1
    fi
}

function downloadLatestOwncloudRelease()
{
	clear
	
	if [[ ! -d /var/www/html/owncloud ]]; then
    mkdir -p /var/www/html/owncloud
    chown -R www-data:www-data /var/www
	fi

	printMsg "Updating to latest Owncloud release."

	# download and extract the latest release of Owncloud
	latestrelease="http://download.owncloud.org/community/owncloud-latest.tar.bz2"
  wget "$latestrelease"
  if [[ $? -gt 0 ]]; then
    wget -O changelog http://owncloud.org/changelog/
    latestrelease=$(cat changelog | grep "Download:" | head -n 2 | tail -n 1 | grep -o '<a href=['"'"'"][^"'"'"']*['"'"'"]' | sed -e 's/^<a href=["'"'"']//' -e 's/["'"'"']$//')
    wget "$latestrelease"
    rm changelog
  fi
  tar -xjf "$(basename $latestrelease)"
  rm "$(basename $latestrelease)"
}

function writeServerConfig()
{
	cat > /etc/nginx/sites-available/default << _EOF_
# owncloud
server {
  listen 80;
    server_name $__servername;
    return 301 https://\$server_name\$request_uri;  # enforce https
}

# owncloud (ssl/tls)
server {
  listen 443 ssl;
  server_name $__servername;
  ssl_certificate /etc/nginx/cert.pem;
  ssl_certificate_key /etc/nginx/cert.key;
  root /var/www/html;
  index index.php;
  client_max_body_size 4000M; # set maximum upload size
  fastcgi_buffers 64 4K;
  add_header Strict-Transport-Security "max-age=15552000; includeSubDomains";

  # deny direct access
  location ~ ^/owncloud/(data|config|\.ht|db_structure\.xml|README) {
    deny all;
  }

  # default try order
  location / {
    try_files \$uri \$uri/ index.php;
  }

  # owncloud WebDAV
  location @webdav {
    fastcgi_split_path_info ^(.+\.php)(/.*)$;
    fastcgi_pass 127.0.0.1:9000;
    fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
    fastcgi_param HTTPS on;
    include fastcgi_params;
  }

  # enable php
  location ~ ^(?<script_name>.+?\.php)(?<path_info>/.*)?$ {
    try_files \$script_name = 404;
    include fastcgi_params;
    fastcgi_param PATH_INFO \$path_info;
    fastcgi_param HTTPS on;
    fastcgi_pass 127.0.0.1:9000;
    fastcgi_read_timeout 900s; # 15 minutes
    fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
  }
}    
_EOF_
}

function main_setservername()
{
    cmd=(dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --inputbox "Please enter the URL of your Owncloud server." 22 76 $__servername)
    choices=$("${cmd[@]}" 2>&1 >/dev/tty)    
    if [ "$choices" != "" ]; then
        __servername=$choices

        if [[ -f /etc/nginx/sites-available/default ]]; then
          sed /etc/nginx/sites-available/default -r -e "s|server_name .*|server_name $__servername;|g"
        fi

    else
        break
    fi  
}

function installCertificateNginx()
{
  dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --msgbox "We are now going to create a self-signed certificate. While you could simply press ENTER when you are asked for country name etc. or enter whatever you want, it might be beneficial to have the web servers host name in the common name field of the certificate." 20 60    
  openssl req $@ -new -x509 -days 365 -nodes -out /etc/nginx/cert.pem -keyout /etc/nginx/cert.key
  chmod 600 /etc/nginx/cert.pem
  chmod 600 /etc/nginx/cert.key  
}

function main_newinstall_nginx()
{
	clear 

	# make sure we use the newest packages
	apt-get update
	apt-get upgrade -y

  locale-gen en_US.UTF-8

	# make sure that the group www-data exists
	groupadd www-data
	usermod -a -G www-data www-data

	# install all needed packages, e.g., Nginx, PHP, SQLite, MariaDB 
  apt-get install -y nginx sendmail sendmail-bin openssl ssl-cert php5-cli php5-sqlite php5-gd php5-curl \
                      php5-common php5-cgi sqlite php-pear php-apc git-core \
                      autoconf automake autotools-dev curl libapr1 libtool curl libcurl4-openssl-dev \
                      php-xml-parser php5 php5-dev php5-gd php5-fpm php5-mysql memcached php5-memcache varnish dphys-swapfile bzip2 mariadb-server
  apt-get autoremove -y

	# set memory split to 240 MB RAM and 16 MB video
  ensureKeyValueShort "gpu_mem" "16" "/boot/config.txt"

	# generate self-signed certificate that is valid for one year
  installCertificateNginx

	writeServerConfig
	sed /etc/php5/fpm/pool.d/www.conf -i -e "s|listen = /var/run/php5-fpm.sock|listen = 127.0.0.1:9000|g"
	sed /etc/php5/fpm/pool.d/www.conf -i -e "s|\;env\[PATH\]|env\[PATH\]|g"


  ensureKeyValue "upload_max_filesize" "2000M" "/etc/php5/fpm/php.ini"
  ensureKeyValue "post_max_size" "2000M" "/etc/php5/fpm/php.ini"
  ensureKeyValue "default_charset" "UTF-8" "/etc/php5/fpm/php.ini"

  ensureKeyValue "upload_tmp_dir" "/srv/http/owncloud/data" "/etc/php5/fpm/php.ini"
  mkdir -p /srv/http/owncloud/data
  chown www-data:www-data /srv/http/owncloud/data

  sed /etc/nginx/sites-available/default -i -e "s|client_max_body_size [0-9]*[M]?;|client_max_body_size 2000M;|g"

	/etc/init.d/php5-fpm restart
	/etc/init.d/nginx restart

	# set ARM frequency to 800 MHz (or use the raspi-config tool to set clock speed)
  ensureKeyValueShort "arm_freq" "800" "/boot/config.txt"
  ensureKeyValueShort "sdram_freq" "400" "/boot/config.txt"
  ensureKeyValueShort "core_freq" "250" "/boot/config.txt"

	# resize swap file to 512 MB
  ensureKeyValueShort "CONF_SWAPSIZE" "512" "/etc/dphys-swapfile"
	dphys-swapfile setup
	dphys-swapfile swapon

  mkdir -p /var/www/html/owncloud
  downloadLatestOwncloudRelease
	mv owncloud/ /var/www/html/

	# change group and owner of all /var/www files recursively to www-data
	chown -R www-data:www-data /var/www

  # enable US UTF-8 locale
  sudo sed -i -e "s/# en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/g" /etc/locale.gen

	# finish the script
	myipaddress=$(hostname -I | tr -d ' ')
  dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --msgbox "If everything went right, Owncloud should now be available at the URL https://$myipaddress/owncloud. You have to finish the setup by visiting that site." 20 60    
}

function installCertificateApache()
{  
  dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --msgbox "We are now going to create a self-signed certificate. While you could simply press ENTER when you are asked for country name etc. or enter whatever you want, it might be beneficial to have the web servers host name in the common name field of the certificate." 20 60    
  clear
  openssl req $@ -new -x509 -days 365 -nodes -out /etc/apache2/apache.pem -keyout /etc/apache2/apache.key
  chmod 600 /etc/apache2/apache.pem
  chmod 600 /etc/apache2/apache.key
}

function main_newinstall_apache()
{
  clear 

  # make sure we use the newest packages
  apt-get update
  apt-get upgrade -y

  locale-gen en_US.UTF-8

  # make sure that the group www-data exists
  groupadd www-data
  usermod -a -G www-data www-data

  # install all needed packages, e.g., Apache, PHP, SQLite
  apt-get install -y apache2 openssl sendmail sendmail-bin ssl-cert libapache2-mod-php5 php5-cli php5-sqlite php5-mysql php5-gd php5-curl php5-common php5-cgi sqlite php-pear php-apc git-core ca-certificates dphys-swapfile bzip2 mariadb-server

  # Change RAM settings 16 MB video RAM
  ensureKeyValueShort "gpu_mem" "16" "/boot/config.txt"

  # generate self-signed certificate that is valid for one year
  installCertificateApache

  # enable Apache modules (as explained at http://owncloud.org/support/install/, Section 2.3)
  a2enmod ssl
  a2enmod rewrite
  a2enmod headers

  # disable unneccessary (for Owncloud) module(s)
  a2dismod cgi
  a2dismod authz_groupfile

  # configure Apache to use self-signed certificate
  mv /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.bak
  sed 's|/etc/ssl/certs/ssl-cert-snakeoil.pem|/etc/apache2/apache.pem|g' /etc/apache2/sites-available/default-ssl.bak > tmp
  sed -i 's|AllowOverride None|AllowOverride All|g' tmp
  sed -i 's|/etc/ssl/private/ssl-cert-snakeoil.key|/etc/apache2/apache.key|g' tmp
  mv tmp /etc/apache2/sites-available/default-ssl

  # limit number of parallel Apache processes
  mv /etc/apache2/apache2.conf /etc/apache2/apache2.conf.bak 
  sed 's|StartServers          5|StartServers          2|g;s|MinSpareServers       5|MinSpareServers       2|g;s|MaxSpareServers      10|MaxSpareServers       3|g' /etc/apache2/apache2.conf.bak > tmp
  mv tmp /etc/apache2/apache2.conf

  # set ARM frequency to 800 MHz (attention: should be safe, but do this at your own risk)
  ensureKeyValueShort "arm_freq" "800" "/boot/config.txt"
  ensureKeyValueShort "sdram_freq" "450" "/boot/config.txt"
  ensureKeyValueShort "core_freq" "350" "/boot/config.txt"

  # resize swap file to 512 MB
  ensureKeyValueShort "CONF_SWAPSIZE" "512" "/etc/dphys-swapfile"
  dphys-swapfile setup
  dphys-swapfile swapon

  # enable SSL site
  a2ensite default-ssl

  mkdir -p /var/www/html/owncloud
  downloadLatestOwncloudRelease
  cp -r owncloud/* /var/www/html/owncloud/
  rm -rf owncloud

  # change group and owner of all /var/www files recursively to www-data
  chown -R www-data:www-data /var/www

  # restart Apache service
  /etc/init.d/apache2 reload

  # enable US UTF-8 locale
  sudo sed -i -e "s/# en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/g" /etc/locale.gen

  # finish the script
  myipaddress=$(hostname -I | tr -d ' ')
  dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --msgbox "If everything went right, Owncloud should now be available at the URL https://$myipaddress/owncloud. You have to finish the setup by visiting that site. Before that, we are going to reboot the Raspberry." 20 60    
    
  reboot
}

function create_db()
{
    __rootpass="root"
    __dbuser="ocuser"
    __dbpass="ocpass"
	
	cmd=(dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --inputbox "Please enter the password of the root db user you selected earlier" 22 76 $__rootpass)
    choices=$("${cmd[@]}" 2>&1 >/dev/tty)    
    if [ "$choices" != "" ]; then
        __rootpass=$choices
    fi
	
    cmd=(dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --inputbox "Please enter the username of the Owncloud db user." 22 76 $__dbuser)
    choices=$("${cmd[@]}" 2>&1 >/dev/tty)    
    if [ "$choices" != "" ]; then
        __dbuser=$choices
    fi
	
	cmd=(dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --inputbox "Please enter the password of the Owncloud db user." 22 76 $__dbpass)
    choices=$("${cmd[@]}" 2>&1 >/dev/tty)    
    if [ "$choices" != "" ]; then
        __dbpass=$choices
    fi
    
    mysql -u root -p"$__rootpass" -e "DROP DATABASE ocdb;"
    mysql -u root -p"$__rootpass" -e "CREATE DATABASE ocdb CHARACTER SET utf8 COLLATE utf8_general_ci;"
    mysql -u root -p"$__rootpass" -e "GRANT ALL PRIVILEGES ON ocdb.* TO $__dbuser@localhost IDENTIFIED BY '$__dbpass';"
    mysql -u root -p"$__rootpass" -e "FLUSH PRIVILEGES;"
}
function mount_external()
{  
    apt-get install -y ntfs-3g
    apt-get autoremove -y
    
    mkdir /media/owncloud
    
    cat /etc/fstab > temp_stab
    uuid=$(blkid /dev/sda1 | grep -Po 'UUID="\K.*?(?=")')
    uid=$(id -u www-data)
    gid=$(id -g www-data)
    echo "UUID=$uuid /media/owncloud auto nofail,uid=$uid,gid=$gid,umask=0027,dmask=0027,noatime 0 0" >> temp_stab
    mv temp_stab /etc/fstab
    
    dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --msgbox "If everything went right, drive in /dev/sda1 is mounted to /media/owncloud. For the changes to be applied, we are going to reboot the Raspberry." 20 60    
    
    reboot
    
}

function main_update()
{
    downloadLatestOwncloudRelease
    cp -r owncloud/* /var/www/html/owncloud/
    rm -rf owncloud

  chown -R www-data:www-data /var/www

    dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --msgbox "Finished upgrading Owncloud instance." 20 60    
}

function main_updatescript()
{
  scriptdir="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
  pushd $scriptdir
  if [[ ! -d .git ]]; then
    dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --msgbox "Cannot find direcotry '.git'. Please clone the OwncloudPie script via 'git clone git://github.com/petrockblog/OwncloudPie.git'" 20 60    
    popd
    return
  fi
  git pull
  popd
  dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --msgbox "Fetched the latest version of the OwncloudPie script. You need to restart the script." 20 60    
}

function main_uninstall()
{
  dialog --title " Uninstall OwncloudPie " --clear \
        --yesno "Do you really want to UNINSTALL OwncloudPie?" 22 76

  case $? in
   0)
    apt-get remove -y nginx sendmail sendmail-bin openssl ssl-cert php5-cli php5-sqlite php5-gd php5-curl \
                      apache2 php5-common php5-cgi sqlite php-pear php-apc git-core \
                      autoconf automake autotools-dev curl libapr1 libtool curl libcurl4-openssl-dev \
                      php-xml-parser php5 php5-dev php5-gd php5-fpm php5-mysql memcached php5-memcache varnish dphys-swapfile bzip2 mariadb-server ntfs-3g
    apt-get -y autoremove 
    ;;
   *)
    ;;
  esac      
}

# here starts the main script

checkNeededPackages

if [[ -f /etc/nginx/sites-available/default ]]; then
  __servername=$(egrep -m 1 "server_name " /etc/nginx/sites-available/default | sed "s| ||g")
  __servername=${__servername:11:0-1}
else
  __servername="url.ofmyserver.com"
fi

if [ $(id -u) -ne 0 ]; then
  printf "Script must be run as root. Try 'sudo ./OwncloudPie_setup'\n"
  exit 1
fi

while true; do
    cmd=(dialog --backtitle "PetRockBlock.com - OwncloudPie Setup." --menu "You MUST set the server URL (e.g., 192.168.0.10 or myaddress.dyndns.org) before starting one of the installation routines. Choose task:" 22 76 16)
    options=(1 "Set server URL ($__servername)"
             2 "New installation, NGiNX based"
             3 "Generate new SSL certificate for NGiNX"
             4 "New installation, Apache based"
             5 "Generate new SSL certificate for Apache"
             6 "Mount external drive (in /dev/sda1)"
             7 "Create MySQL database for OwnCloud"
             8 "Update existing Owncloud installation"
             9 "Update OwncloudPie script"
             10 "Uninstall OwncloudPie")
    choice=$("${cmd[@]}" "${options[@]}" 2>&1 >/dev/tty)    
    if [ "$choice" != "" ]; then
        case $choice in
            1) main_setservername ;;
            2) main_newinstall_nginx ;;
            3) installCertificateNginx ;;
            4) main_newinstall_apache ;;
            5) installCertificateApache ;;
            6) mount_external ;;
            7) create_db ;;
            8) main_update ;;
            9) main_updatescript ;;
            10) main_uninstall ;;
        esac
    else
        break
    fi
done
clear