alma 9 fixes

2025-03-30 19:21:37 +02:00
parent f086d7e1fc
commit d509bdd249
2 changed files with 937 additions and 6 deletions
@@ -0,0 +1,924 @@
+#!/bin/bash
+
+BINARY="false"
+VERSION="v41 05.04.2024"
+URL="https://ht.zenadmin.pl"
+IPP=""
+
+# ----------------------------------
+# Colors
+# ----------------------------------
+NOCOLOR='\033[0m'
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+ORANGE='\033[0;33m'
+BLUE='\033[0;34m'
+PURPLE='\033[0;35m'
+CYAN='\033[0;36m'
+LIGHTGRAY='\033[0;37m'
+DARKGRAY='\033[1;30m'
+LIGHTRED='\033[1;31m'
+LIGHTGREEN='\033[1;32m'
+YELLOW='\033[1;33m'
+LIGHTBLUE='\033[1;34m'
+LIGHTPURPLE='\033[1;35m'
+LIGHTCYAN='\033[1;36m'
+WHITE='\033[1;37m'
+
+#sprawdzam wersje
+
+host=$(hostname)
+
+case "$1" in
+
+setup)
+if [ ! -f /sbin/daupdate ]; then
+echo "pobieram..."
+wget https://ht.zenadmin.pl/daupdate.sh -O /sbin/daupdate
+chmod +x /sbin/daupdate
+wget https://ht.zenadmin.pl/daupdate.sh -O /opt/daupdate.sh
+fi
+;;
+
+pupdate)
+echo "pobieram..."
+wget https://ht.zenadmin.pl/daupdate.sh -O /sbin/daupdate
+chmod +x /sbin/daupdate
+wget https://ht.zenadmin.pl/daupdate.sh -O /opt/daupdate
+exit 1
+;;
+
+yumu)
+yum update -y
+;;
+
+u)
+cd /usr/local/directadmin/custombuild/
+./build update
+./build versions
+;;
+
+uda)
+cd /usr/local/directadmin/custombuild/
+./build update
+./build update_da
+;;
+
+v)
+cd /usr/local/directadmin/custombuild/
+./build update
+;;
+
+
+cb)
+cd /usr/local/directadmin/custombuild/
+./build update
+;;
+
+dacli)
+wget https://ht.zenadmin.pl/da_cli.sh -O /sbin/dacli
+chmod +x /usr/sbin/dacli
+;;
+
+
+phpzmienne)
+wget 185.242.134.234/da/php_zmienne.sh -O /opt/php_zmienne.sh
+wget -O /usr/local/directadmin/ht_php_settings 185.242.134.234/da/ht_php_settings
+chmod +x /opt/php_zmienne.sh
+echo "skryot zainstalowany w /opt/php_zmienne.sh"
+echo "edytuj zminne w /opt/php_zmienne.sh lub /usr/local/directadmin/ht_php_settings "
+echo "nastepnie wykonaj sh /opt/php_zmienne.sh"
+;;
+
+csfcf)
+cd /opt
+wget https://ht.zenadmin.pl/da/csf_cfip.sh -O /opt/csf_cfip.sh
+sh /opt/csf_cfip.sh
+;;
+
+
+csf2222)
+cd /opt
+wget https://ht.zenadmin.pl/da/csf_off2222.sh -O /opt/csf_off2222.sh
+sh /opt/csf_off2222.sh
+
+;;
+
+one_click_webmail_login)
+cd /usr/local/directadmin
+./directadmin set one_click_webmail_login 1
+perl -pi -e 's/webmail_link=poczta/webmail_link=roundcube/' /usr/local/directadmin/conf/directadmin.conf
+service directadmin restart
+/usr/local/directadmin/custombuild/build roundcube
+/usr/local/directadmin/custombuild/build dovecot_conf
+;;
+
+
+#apache
+httpdtest)
+wget https://ht.zenadmin.pl/apachetest.sh -O /opt/apachetest.sh
+sh /opt/apachetest.sh
+
+;;
+
+composer)
+
+/usr/local/directadmin/custombuild/build update
+/usr/local/directadmin/custombuild/build composer
+
+;;
+
+
+da_update_apache)
+wget --timeout=1 --tries=3 -O /opt/hitme_update_daapache.sh ht.zenadmin.pl/da/hitme_update_daapache.sh
+sh /opt/hitme_update_daapache.sh
+;;
+
+
+da_alma_repo)
+wget --timeout=1 --tries=3 -O /opt/hitme_update_daapache.sh ht.zenadmin.pl/da/hitme_almarepo.sh
+sh /opt/hitme_almarepo.sh
+;;
+
+logrotate)
+wget -O /opt/logrotate.sh https://ht.zenadmin.pl/da/logrotate.sh
+sh /opt/logrotate.sh
+;;
+
+
+        munin)
+
+
+yum --skip-broken --enablerepo=epel install -y htop mc screen mlocate numactl lsof ipset perl-LWP-Protocol-https python-pyspf perl-libwww-perl unzip wget net-tools bind-utils unhide
+
+yum --skip-broken --enablerepo=epel install -y perl-Geo-IP perl-Net-CIDR-Lite perl-Razor-Agent perl-Net-Patricia perl-Net-DNS-Nameserver perl-Mail-SPF perl-DB_File perl-BSD-Resource perl-Archive-Zip perl-IO-String
+
+yum --skip-broken --enablerepo=epel install -y perl-IO-Zlib perl-IO-Socket-INET6 perl-Encode-Detect perl-Net-SMTP-SSL perl-MailTools perl-Package-Constants perl-Archive-Tar perl-Crypt-OpenSSL-Random perl-Crypt-OpenSSL-Bignum perl-Crypt-OpenSSL-RSA perl-Mail-DKIM GeoIP
+
+yum --enablerepo=epel install -y munin
+yum --enablerepo=epel install -y munin-node
+chkconfig munin-node on
+systemctl enable munin-node.service
+mkdir /etc/munin/www
+chown munin:munin /etc/munin/www
+perl -pi -e 's/^(#|)htmldir .*/htmldir \/etc\/munin\/www/' /etc/munin/munin.conf
+
+ln -s /usr/share/munin/plugins/mysql_bytes /etc/munin/plugins/
+ln -s /usr/share/munin/plugins/mysql_queries /etc/munin/plugins/
+ln -s /usr/share/munin/plugins/mysql_threads /etc/munin/plugins/
+touch /etc/httpd/conf/extra/httpd-munin.conf
+echo "include /etc/httpd/conf/extra/httpd-munin.conf" >> /etc/httpd/conf/extra/httpd-includes.conf
+
+#teraz nano /etc/httpd/conf/extra/httpd-munin.conf
+wget -O /etc/httpd/conf/extra/httpd-munin.conf https://ht.zenadmin.pl/munin/httpd-munin.conf
+usermod -s /sbin/nologin munin
+egrep '^\[' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
+egrep '^(#|)host_name' /etc/munin/munin-node.conf
+perl -pi -e 's/\[localhost\]/\['$(hostname)'\]/' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
+perl -pi -e 's/\[localhost\.localdomain\]/\['$(hostname)'\]/' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
+perl -pi -e 's/^.*host_name .*/host_name '$(hostname)'/' /etc/munin/munin-node.conf
+grep --color '^\[' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
+grep --color ^host_name /etc/munin/munin-node.conf
+perl -pi -e 's/^.*host_name .*/host_name '$(hostname -f)'/' /etc/munin/munin-node.conf
+perl -pi -e 's/\[localhost\]/\['$(hostname -f)'\]/' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
+grep --color '^\[' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
+grep --color ^host_name /etc/munin/munin-node.conf
+
+rm -f /etc/munin/plugins/df_inode /etc/munin/plugins/entropy /etc/munin/plugins/forks /etc/munin/plugins/if_err_* /etc/munin/plugins/interrupts /etc/munin/plugins/irqstats /etc/munin/plugins/nfs4_client /etc/munin/plugins/nfs* /etc/munin/plugins/open_inodes /etc/munin/plugins/postfix* /etc/munin/plugins/proc_pri /etc/munin/plugins/swap /etc/munin/plugins/http_loadtime /etc/munin/plugins/ntp_* /etc/munin/plugins/munin_* /etc/munin/plugins/ip_*
+ls -1 /etc/munin/plugins/if_* | grep -v if_$(ip link show | grep "\ UP\ " | awk '{print $2}' | cut -d\: -f1)$ | xargs rm -fv
+
+ls -1 /etc/munin/plugins/
+touch /etc/munin/plugins/apache_requests_post
+ls -1 /etc/munin/plugins/
+wget -O /etc/munin/plugins/apache_requests_post https://ht.zenadmin.pl/munin/conf/apache_requests_post
+chmod 755 /etc/munin/plugins/apache_requests_post
+
+chmod 755 /etc/munin/plugins/apache_requests_post
+wget -O /etc/munin/plugin-conf.d/munin-node https://ht.zenadmin.pl/munin/conf/munin-node
+service munin-node restart
+mkdir /usr/local/directadmin/custombuild/custom/ap2/conf/extra/ -p
+touch /usr/local/directadmin/custombuild/custom/ap2/conf/extra/httpd-info.conf
+wget -O /usr/local/directadmin/custombuild/custom/ap2/conf/extra/httpd-info.conf https://ht.zenadmin.pl/munin/httpd-info.conf
+wget -O /var/www/html/.htpasswd https://ht.zenadmin.pl/munin/htpasswd
+
+
+#w celu wygenrowania wlasnego np. 
+#printf "webAdmin:`openssl passwd -apr1`\n" > /var/www/html/.htpasswd
+cat /var/www/html/.htpasswd
+/usr/local/directadmin/custombuild/build rewrite_confs
+perl -pi -e 's#PT_APACHESTATUS = ".*"#PT_APACHESTATUS = "http://127.0.0.1/httpd-status"#' /etc/csf/csf.conf
+grep ^PT_APACHESTATUS /etc/csf/csf.conf
+service lfd restart
+
+
+cd /etc/munin/www/
+wget -O /etc/munin/www/.htaccess https://ht.zenadmin.pl/munin/hta
+chown munin:munin /etc/munin/www/.htaccess
+cd /etc/munin/plugins
+find * -not -type d -exec munin-run {} \;
+cd /etc/munin/plugins
+find * -not -type d -exec munin-run {} \;
+/usr/local/directadmin/directadmin c | sort | egrep "sni|lets" --color
+wget -O /etc/cron.hourly/ipcs_check https://ht.zenadmin.pl/munin/ipcs_check
+
+cd /etc/munin/plugins
+ln -s /usr/share/munin/plugins/nginx_request .
+ln -s /usr/share/munin/plugins/nginx_status .
+service munin-node restart
+
+
+munin-run processes; munin-run threads
+cat /proc/mounts | grep ^proc | grep hidepid= --color
+munin-run processes; munin-run threads
+
+;;
+update)
+echo "update..."
+wget https://ht.zenadmin.pl/daupdate.sh -O /sbin/daupdate
+chmod +x /sbin/daupdate
+wget https://ht.zenadmin.pl/daupdate.sh -O /opt/daupdate
+wget https://ht.zenadmin.pl/da_cli.sh -O /sbin/dacli
+chmod +x /sbin/dacli
+exit 1
+;;
+
+da_cli)
+wget https://ht.zenadmin.pl/da_cli.sh -O /opt/da_cli.sh
+;;
+
+lynis)
+
+echo "include /etc/httpd/conf/extra/httpd-munin.conf" >> /etc/httpd/conf/extra/httpd-includes.conf
+yum update -y ca-certificates curl nss openssl
+wget -O /etc/yum.repos.d/cisofy-lynis.repo https://ht.zenadmin.pl/munin/cisofy-lynis.repo
+
+#yum install -y lynis
+lynis update info
+lynis update check
+lynis audit system
+
+;;
+csfupdate)
+cd /root
+wget --no-check-certificate -O csf-bfm-update.sh https://raw.githubusercontent.com/poralix/directadmin-bfm-csf/master/update.sh
+chmod 700 csf-bfm-update.sh
+./csf-bfm-update.sh
+yum -y install perl-libwww-perl.noarch perl-LWP-Protocol-https.noarch perl-GDGraph perl-Math-BigInt  unzip bind-utils
+
+
+perl -pi -e 's#SYSLOG_CHECK = ".*"#SYSLOG_CHECK = "3600"#' /etc/csf/csf.conf
+
+cd /etc/csf
+egrep "^LF_TRIGGER|^LF_SSHD|^LF_FTPD|^LF_SMTPAUTH|^LF_EXIMSYNTAX|^LF_POP3D|^LF_IMAPD|^LF_HTACCESS|^LF_MODSEC|^LF_DIRECTADMIN" /etc/csf/csf.conf | grep -v _PERM
+
+yum --enablerepo=epel install git etckeeper -y
+perl -pi -e 's/^UDP_IN = ".*"/UDP_IN = "20,21,53,443"/' /etc/csf/csf.conf
+perl -pi -e 's/^UDP6_IN = ".*"/UDP6_IN = "20,21,53,443"/' /etc/csf/csf.conf
+perl -pi -e 's/^UDP_OUT = ".*"/UDP_OUT = "20,21,43,53,113,123,443,24441"/' /etc/csf/csf.conf
+perl -pi -e 's/^UDP6_OUT = ".*"/UDP6_OUT = "20,21,43,53,113,123,443,24441"/' /etc/csf/csf.conf
+egrep "^(UD|TC)P(|6)_(IN|OUT)" /etc/csf/csf.conf --color
+perl -pi -e 's/^TESTING = "1"/TESTING = "0"/' /etc/csf/csf.conf
+perl -pi -e 's/^RESTRICT_SYSLOG = "0"/RESTRICT_SYSLOG = "3"/' /etc/csf/csf.conf
+egrep "^(TESTING\ |RESTRICT_SYSLOG )" /etc/csf/csf.conf
+service lfd restart; service csf restart
+
+;;
+rspamd)
+cd /usr/local/directadmin/custombuild
+./build update 
+./build set eximconf yes 
+./build set eximconf_release 4.5 
+./build set blockcracking yes 
+./build set easy_spam_fighter yes 
+./build set spamd rspamd
+./build set exim yes 
+./build exim 
+./build set dovecot_conf yes 
+./build dovecot_conf 
+./build update 
+./build exim_conf
+
+;;
+
+multi)
+echo "action=rewrite&value=named" >> /usr/local/directadmin/data/task.queue
+;;
+
+multi-debug)
+cd /usr/local/directadmin
+echo "action=rewrite&value=named" >> data/task.queue; ./dataskq d2000
+;;
+
+
+proftpd)
+wget -O /opt/proftpd_update1.sh https://ht.zenadmin.pl/proftpd_update1.sh
+sh /opt/proftpd_update1.sh
+;;
+
+
+revda)
+
+cd /usr/local/directadmin/custombuild/custom
+wget -O /usr/local/directadmin/custombuild/custom/nginx_reverse.tar https://ht.zenadmin.pl/nginx_reverse.tar
+mv nginx_reverse nginx_reverse_old
+tar -xvf nginx_reverse.tar
+rm -rf nginx_reverse.tar
+
+
+./usr/local/directadmin/custombuild/build update_da
+cd /usr/local/directadmin/data/templates/custom
+cd /usr/local/directadmin/data/templates/custom
+mv nginx_server.conf kopia_nginx_server.conf
+mv nginx_server_secure.conf kopia_nginx_server_secure.conf
+mv nginx_server_secure_sub.conf kopia_nginx_server_secure_sub.conf
+mv nginx_server_sub.conf kopia_nginx_server_sub.conf
+mv virtual_host2.conf kopia_virtual_host2.conf
+mv virtual_host2_secure.conf kopia_virtual_host2_secure.conf
+mv virtual_host2_secure_sub.conf kopia_virtual_host2_secure_sub.conf
+mv virtual_host2_sub.conf kopia_virtual_host2_sub.conf
+wget -O /usr/local/directadmin/data/templates/custom/nginx_conf.tar https://ht.zenadmin.pl/nginx_conf.tar
+tar -xvf nginx_conf.tar
+rm -rf nginx_conf.tar
+
+
+mkdir -p /var/nginx/
+chown nginx:nginx /var/nginx/
+
+
+cd /usr/local/directadmin/custombuild/
+./build update
+cd /usr/local/directadmin/custombuild/
+echo "jak wszytko dobrze wykonaj
+/usr/local/directadmin/custombuild/build set webserver nginx_apache
+/usr/local/directadmin/custombuild/build nginx_apache"
+
+cd /etc/nginx/
+wget https://ht.zenadmin.pl/nginx_etc.tar -O /etc/nginx/nginx_etc.tar
+tar -xvf nginx_etc.tar
+rm -rf nginx_etc.tar
+
+;;
+usunrevda)
+cd /usr/local/directadmin/data/templates/custom
+mv nginx_server.conf kopia_nginx_server.conf_nginxver
+mv nginx_server_secure.conf kopia_nginx_server_secure.conf_nginxver
+mv nginx_server_secure_sub.conf kopia_nginx_server_secure_sub.conf_nginxver
+mv nginx_server_sub.conf kopia_nginx_server_sub.conf_nginxver
+mv virtual_host2.conf kopia_virtual_host2.conf_nginxver
+mv virtual_host2_secure.conf kopia_virtual_host2_secure.conf_nginxver
+mv virtual_host2_secure_sub.conf kopia_virtual_host2_secure_sub.conf_nginxver
+mv virtual_host2_sub.conf kopia_virtual_host2_sub.conf_nginxver
+
+mv kopia_virtual_host2.conf virtual_host2.conf
+mv kopia_virtual_host2_secure.conf virtual_host2_secure.conf
+mv kopia_virtual_host2_secure_sub.conf virtual_host2_secure_sub.conf
+mv kopia_virtual_host2_sub.conf virtual_host2_sub.conf
+/usr/local/directadmin/custombuild/build set webserver apache
+/usr/local/directadmin/custombuild/build apache
+/usr/local/directadmin/custombuild/build rewrite_confs
+
+;;
+zstd)
+cd /usr/local/directadmin/custombuild
+./build zstd
+cd /usr/local/directadmin
+./directadmin set zstd 1
+./directadmin set backup_gzip 
+;;
+
+
+revda_do_apache)
+cd /usr/local/directadmin/data/templates/custom
+mv nginx_server.conf kopia_nginx_server.conf_nginxver
+mv nginx_server_secure.conf kopia_nginx_server_secure.conf_nginxver
+mv nginx_server_secure_sub.conf kopia_nginx_server_secure_sub.conf_nginxver
+mv nginx_server_sub.conf kopia_nginx_server_sub.conf_nginxver
+mv virtual_host2.conf kopia_virtual_host2.conf_nginxver
+mv virtual_host2_secure.conf kopia_virtual_host2_secure.conf_nginxver
+mv virtual_host2_secure_sub.conf kopia_virtual_host2_secure_sub.conf_nginxver
+mv virtual_host2_sub.conf kopia_virtual_host2_sub.conf_nginxver
+
+/usr/local/directadmin/custombuild/build set webserver apache
+/usr/local/directadmin/custombuild/build apache
+/usr/local/directadmin/custombuild/build rewrite_confs
+;;
+
+
+
+secure_da_config)
+
+echo "check_subdomain_owner=1" >> /usr/local/directadmin/conf/directadmin.conf
+perl -pi -e 's/check_subdomain_owner=0/check_subdomain_owner=1/' /usr/local/directadmin/conf/directadmin.conf
+
+grep -E --color "random_password_length=|random_password_length_max=|enforce_difficult_passwords=|check_subdomain_owner=" /usr/local/directadmin/conf/directadmin.conf
+grep --color "^logs_to_keep=" /usr/local/directadmin/conf/directadmin.conf
+grep -q "^logs_to_keep=" /usr/local/directadmin/conf/directadmin.conf || echo "logs_to_keep=30" >> /usr/local/directadmin/conf/directadmin.conf
+perl -pi -e 's/logs_to_keep=.*$/logs_to_keep=30/' /usr/local/directadmin/conf/directadmin.conf
+
+
+service directadmin restart
+
+
+grep -E --color "random_password_length=|random_password_length_max=|enforce_difficult_passwords=" /usr/local/directadmin/conf/directadmin.conf
+grep -q "^enforce_difficult_passwords=" /usr/local/directadmin/conf/directadmin.conf || echo "enforce_difficult_passwords=1" >> /usr/local/directadmin/conf/directadmin.conf
+perl -pi -e 's/enforce_difficult_passwords=0/enforce_difficult_passwords=1/' /usr/local/directadmin/conf/directadmin.conf
+echo -e "random_password_length=18\nrandom_password_length_max=20" >> /usr/local/directadmin/conf/directadmin.conf
+service directadmin restart
+
+
+
+;;
+
+secssh)
+
+#ssh
+cp -fp /etc/ssh/sshd_config /etc/ssh/sshd_config~bak
+perl -pi -e 's/^(#|)UseDNS .*/UseDNS no/' /etc/ssh/sshd_config
+grep -q ^UseDNS /etc/ssh/sshd_config || perl -pi -e "s/UsePAM yes/UsePAM yes\nUseDNS no/" /etc/ssh/sshd_config
+perl -pi -e 's/#PrintLastLog yes/PrintLastLog yes/' /etc/ssh/sshd_config
+perl -pi -e 's/#PrintMotd yes/PrintMotd yes/' /etc/ssh/sshd_config
+perl -pi -e 's/GSSAPIAuthentication yes/GSSAPIAuthentication no/' /etc/ssh/sshd_config
+perl -pi -e 's/#KerberosAuthentication no/KerberosAuthentication no/' /etc/ssh/sshd_config
+perl -pi -e 's/#LoginGraceTime 2m/LoginGraceTime 45/' /etc/ssh/sshd_config
+egrep -v "^$|^#" /etc/ssh/sshd_config
+perl -pi -e 's/^(#|)AllowTcpForwarding .*/AllowTcpForwarding no/' /etc/ssh/sshd_config
+perl -pi -e 's/^(#|)ClientAliveCountMax .*/ClientAliveCountMax 2/' /etc/ssh/sshd_config
+perl -pi -e 's/^(#|)Compression .*/Compression no/' /etc/ssh/sshd_config
+perl -pi -e 's/^(#|)LogLevel .*/LogLevel verbose/' /etc/ssh/sshd_config
+perl -pi -e 's/^(#|)MaxAuthTries .*/MaxAuthTries 3/' /etc/ssh/sshd_config
+perl -pi -e 's/^(#|)MaxSessions .*/MaxSessions 2/' /etc/ssh/sshd_config
+perl -pi -e 's/^(#|)TCPKeepAlive .*/TCPKeepAlive no/' /etc/ssh/sshd_config
+perl -pi -e 's/^(#|)X11Forwarding .*/X11Forwarding no/' /etc/ssh/sshd_config
+perl -pi -e 's/^(#|)AllowAgentForwarding .*/AllowAgentForwarding no/' /etc/ssh/sshd_config
+perl -pi -e 's/^(#|)UsePrivilegeSeparation .*/UsePrivilegeSeparation yes/' /etc/ssh/sshd_config
+perl -pi -e 's/^(|#)PermitRootLogin .*/PermitRootLogin without-password/' /etc/ssh/sshd_config
+perl -pi -e 's/^#AllowUsers root/AllowUsers root/' /etc/ssh/sshd_config
+usermod -G wheel -a admin
+perl -pi -e 's/^#(|\ )auth.*required.*pam_wheel.so/auth            required        pam_wheel.so/' /etc/pam.d/su
+cat /etc/pam.d/su | grep ^auth
+service sshd restart
+;;
+
+secssh2)
+cd /opt
+wget -O /opt/secssh2.sh https://ht.zenadmin.pl/secssh2.sh
+sh /opt/secssh2.sh
+rm -f secssh2.sh
+wget -O /opt/keyputmb.sh https://ht.zenadmin.pl/keyputmb.sh
+sh /opt/keyputmb.sh
+rm -f keyputmb.sh
+wget -O /opt/keyputmm.sh https://ht.zenadmin.pl/keyputmm.sh
+sh /opt/keyputmm.sh
+rm -f keyputmm.sh
+;;
+
+dkim)
+wget -O /opt/dadkim.sh https://ht.zenadmin.pl/marekdaupdate/dadkim.sh
+sh /opt/dadkim.sh
+rm -f /opt/dadkim.sh
+;;
+optda)
+wget -O /opt/optda.sh https://ht.zenadmin.pl/marekdaupdate/optda.sh
+sh /opt/optda.sh
+rm -f /opt/optda.sh
+;;
+optda_all)
+daupdate optda
+daupdate pma-no-public
+daupdate one_click_pma
+;;
+netdata)
+cd /usr/local/directadmin/custombuild
+./build netdata
+;;
+poprawka_mycnf)
+wget -O /opt/poprawkamy.sh https://ht.zenadmin.pl/poprawkamy.sh
+sh /opt/poprawkamy.sh
+;;
+
+mysqlrr)
+wget -O /opt/mysqlrr2020.sh https://ht.zenadmin.pl/mysqlrr2020.sh
+sh /opt/mysqlrr2020.sh
+;;
+
+keyput)
+wget -O /opt/keyputmb.sh https://ht.zenadmin.pl/keyputmb.sh
+sh /opt/keyputmb.sh
+wget -O /opt/keyputmm.sh https://ht.zenadmin.pl/keyputmm.sh
+sh /opt/keyputmm.sh
+;;
+
+rrroundcube)
+wget -O /opt/rrroundcube.sh root@https://ht.zenadmin.pl/rrroundcube.sh
+sh /opt/rrroundcube.sh
+;;
+
+dalets)
+/usr/local/directadmin/custombuild/build update
+/usr/local/directadmin/custombuild/build update_da
+/usr/local/directadmin/custombuild/build letsencrypt
+/usr/local/directadmin/custombuild/build lego
+;;
+
+rblda_standard)
+wget -O /opt/rbl_da.sh https://ht.zenadmin.pl/rbl_da.sh
+sh /opt/rbl_da.sh
+;;
+
+rblda_full)
+wget -O /opt/rbl_da.sh https://ht.zenadmin.pl/rbl_da.sh
+sh /opt/rbl_da.sh
+;;
+
+mysqlstat)
+wget -O /opt/mysql_infostat.sh https://ht.zenadmin.pl/mysql_infostat.sh
+sh /opt/mysql_infostat.sh
+;;
+
+mysqllatka)
+wget -O /opt/mysqllatka1.sh https://ht.zenadmin.pl/da/mysqllatka1.sh
+sh /opt/mysqllatka1.sh
+;;
+
+
+mysqlopt)
+wget -O /opt/mysqlopt.sh https://ht.zenadmin.pl/mysqlopt.sh
+sh /opt/mysqlopt.sh
+;;
+
+dacsf_install)
+wget -O /opt/csfda.sh https://ht.zenadmin.pl/csfda.sh
+sh /opt/csfda.sh install
+;;
+
+dacsf_update)
+wget -O /opt/csfda.sh https://ht.zenadmin.pl/csfda.sh
+sh /opt/csfda.sh update
+;;
+
+daupdate_poczty)
+wget -O /opt/update_poczty_da.sh https://ht.zenadmin.pl/update_poczty_da.sh
+sh /opt/update_poczty_da.sh
+;;
+
+dasni)
+wget -O /opt/sni_da.sh https://ht.zenadmin.pl/sni_da.sh
+sh /opt/sni_da.sh
+;;
+
+klucze)
+wget -O /opt/supportkey.sh https://ht.zenadmin.pl/supportkey.sh
+sh /opt/supportkey.sh
+;;
+
+del_clamav)
+wget -O /opt/del_clamav.sh https://ht.zenadmin.pl/del_clamav.sh
+sh /opt/del_clamav.sh
+;;
+
+update_da)
+echo "Info o licencji:"
+da license
+echo "DA VERSION"
+da version
+echo "robie update"
+/usr/local/directadmin/custombuild/build update
+/usr/local/directadmin/custombuild/build update_da
+
+;;
+
+da_update_1)
+wget -O /opt/bulk_da.sh https://ht.zenadmin.pl/da/bulk_da.sh
+sh /opt/bulk_da.sh
+;;
+
+buc)
+wget -O /opt/bulk_da.sh https://ht.zenadmin.pl/bulk_da.sh
+sh /opt/bulk_da.sh
+;;
+
+bucc)
+wget -O /opt/bulk_dacustom.sh https://ht.zenadmin.pl/da/bulk_dacustom.sh
+sh /opt/bulk_dacustom.sh
+;;
+
+dattl)
+wget -O /opt/dattl.sh https://ht.zenadmin.pl/dattl.sh
+sh /opt/dattl.sh
+;;
+
+vs)
+/usr/local/directadmin/build update
+/usr/local/directadmin/build versions
+;;
+
+
+
+one_click_pma)
+cd /usr/local/directadmin/
+./directadmin set one_click_pma_login 1
+service directadmin restart
+cd custombuild
+./build update
+./build phpmyadmin
+;;
+
+pma-no-public)
+cd /usr/local/directadmin/custombuild
+./build update
+./build set phpmyadmin_public no
+./build phpmyadmin
+;;
+
+eol6)
+wget -O /opt/hteol6.sh https://ht.zenadmin.pl/hteol6.sh
+sh /opt/hteol6.sh
+rm -f /opt/hteol6.sh
+;;
+
+bbmysql)
+wget https://ht.zenadmin.pl/da/bmysql.sh /opt/bmysql.sh
+sh /opt/bmysql.sh
+rm -f /opt/bmysql.sh
+;;
+
+pusta_opcja)
+echo " tutaj skrypt"
+;;
+
+
+
+szukajdnsow-zewnetrznych)
+wget -O /opt/dattl.sh https://ht.zenadmin.pl/szukaj_dnsow_zewnetrznych.sh
+sh /opt/szukaj_dnsow_zewnetrznych.sh
+;;
+
+poprawka-ipold)
+wget -O /opt/poprawkaipold.sh https://ht.zenadmin.pl/poprawkaipold.sh
+sh /opt/poprawkaipold.sh
+;;
+
+hostname)
+hostname=$(hostname -f)
+/usr/local/directadmin/custombuild/build update
+/usr/local/directadmin/custombuild/build update_da
+/usr/local/directadmin/custombuild/build letsencrypt
+
+/usr/local/directadmin/scripts/letsencrypt.sh request_single $(hostname -f) 4096
+
+/usr/local/directadmin/directadmin set ssl_redirect_host $(hostname -f)
+service directadmin restart
+
+;;
+
+
+csf_me)
+
+wget -O /opt/csf_ipset_rblmalware.sh https://ht.zenadmin.pl/csf_ipset_rblmalware.sh
+sh /opt/csf_ipset_rblmalware.sh
+;;
+
+cen6_modsec_latka)
+wget -o /opt/cent6-modsec.sh https://ht.zenadmin.pl/da-centos6/cent6-modsec.sh
+sh /opt/cent6-modsec.sh
+;;
+
+modsec)
+wget -O /opt/hitmemodsec.sh  https://ht.zenadmin.pl/hitmemodsec.sh
+sh /opt/hitmemodsec.sh
+;;
+
+
+eximsec1)
+wget -O /opt/eximsec1.sh https://ht.zenadmin.pl/eximsec1.sh
+sh /opt/eximsec1.sh
+;;
+
+prompt)
+wget -O /opt/prompt.sh https://ht.zenadmin.pl/da/prompt.sh
+sh /opt/prompt.sh
+;;
+
+
+fast)
+#wget -O /opt/daupdate https://ht.zenadmin.pl/daupdate
+daupdate pupdate
+daupdate secssh
+daupdate dacsf_install
+daupdate mysqlrr
+daupdate keyput
+daupdate dalets
+daupdate rblda_full
+daupdate klucze
+daupdate dasni
+daupdate one_click_pma
+daupdate pma-no-public
+daupdate bbmysql
+daupdate secure_da_config
+;;
+
+bu)
+cd /usr/local/directadmin/custombuild/
+./build set_fastest
+./build update
+;;
+
+bv)
+cd /usr/local/directadmin/custombuild/
+./build version
+./build versions
+;;
+
+set_fastest)
+cd /usr/local/directadmin/custombuild/
+./build set_fastest
+./build update
+;;
+bur)
+cd /usr/local/directadmin/custombuild/
+./build set_fastest
+./build update
+./build rewrite_confs
+;;
+bufull)
+cd /usr/local/directadmin/custombuild/
+./build set_fastest
+./build update_versions
+;;
+
+o)
+nano /usr/local/directadmin/custombuild/options.conf
+;;
+eximstats)
+cd /var/log/exim
+eximstats mainlog > stats.txt
+less stats.txt
+
+;;
+uexim)
+daupdate bu
+cd /usr/local/directadmin/custombuild/
+./build exim
+./build exim_conf
+;;
+udovecot)
+daupdate bu
+cd /usr/local/directadmin/custombuild/
+./build dovecot
+./build dovecot_conf
+;;
+ued)
+daupdate bu
+daupdate uexim
+daupdate udovecot
+;;
+
+buv)
+cd /usr/local/directadmin/custombuild/
+./build set_fastest
+./build update
+./build versions
+;;
+
+
+lets)
+cd /usr/local/directadmin/custombuild/
+./build update
+./build letsencrypt
+./build lego
+;;
+
+
+
+sslhostname)
+daupdate lets
+cd /usr/local/directadmin/scripts
+./letsencrypt.sh request_single `hostname` 4096
+;;
+
+
+
+
+dalatka)
+wget -O /opt/da162latka.sh https://ht.zenadmin.pl/da162latka.sh
+sh /opt/da162latka.sh
+;;
+
+antybots)
+wget https://ht.zenadmin.pl/daupdate/modsec-antybots.sh -O /opt/modsec-antybots.sh
+sh /opt/modsec-antybots.sh
+;;
+
+*)
+            echo $"Usage: $0 Mozesz uzywac
+daupdate FUNKCJA
+
+daupdate hostname)		-- Instalacja letsencrypt dla hostname i wymuszenie SSL i redirect hostname dla DA
+daupdate poprawka-ipold)	-- Usuwa stare IP 188.116.a.b z configow domen i firewalla
+daupdate munin	 		-- instalacja statystyk
+daupdate revda 			-- instalacja nginx-apache dla DA z TLS 1.3  
+daupdate usunrevda		-- usuniecie nginx-apache i build Apache z odtworzeniem starych custom template przed instalacja revda
+daupdate revda_do_apache        -- usuniecie nginx-apache i build Apache z nowymi swiezymi custom template od DA 
+daupdate secssh 		-- suecure ssh BETA
+daupdate poprawka_mycnf 	-- poprawka my.cnf z client dla DA
+daupdate secure_da_config 	-- opcja dla DA poprawkia do configu dluzsze hasla, logi max 30dni
+daupdate bbmysql                -- INSTALACJA skryptu do backupow MySQL dla DA
+daupdate mysqlrr		-- MySQL restart hasla da_admin
+daupdate mysqlstat		-- MySQL wyciagnij statystyki dla mysql 
+daupdate mysqlopt		-- MySQL odpalenie optymalizacji tabel/naprawy dla DA
+daupdate mysqllatka             -- MySQL usuniecie pustych userow i zmiana hasla root na dlugie
+daupdate bb			-- instalacja borgbackup BETA
+daupdate keyput			-- instalacja kluczy do SSH
+daupdate rrroundcube		-- poprawka hasla do bazy danych roundcube
+daupdate dalets			-- UPDATE: DA + letsencrypt
+daupdate dkim			-- AKTYWACJA DKIM dla DA (daje opcje wyboru czy dla all czy per user)
+daupdate rspamd			-- Instalacja rspamd + aktualziacja exim, dovecot, blockcracking, esf
+daupdate rblda_standard		-- update exim + dovecot + wgranie rbl
+daupdate rblda_full             -- force update exim + dovecot + wgranie rbl + exim_conf + dovecot_conf
+daupdate dacsf_install		-- CSF Instalacja CSF z konfiguracja od poralix
+daupdate dacsf_update		-- CSF Aktualizacja CSF z konfiguracja od poralix
+daupdate daupdate_poczty	-- aktualizacja serwera poczty DA (exim, dovecot, spamblocker, blockcracking + configi)
+daupdate dasni			-- instalacja/konfiguracja sni dla serwera poczty directadmin
+daupdate klucze			-- dodaniwae kluczy da
+daupdate del_clamav		-- usuniwae clamav freshclam DA
+daupdate proftpd		-- update proftpd z poprawkami do sftp i configow proftpd
+daupdate logrotate 		-- BETA - poprawki logrotate zmniejszajace ilosc logow
+daupdate prompt              -- sprawdza i dodaje kolorki do bash profile
+daupdate phpzmienne		-- skrypt do ustawiania ustawien php.ini dla wielu wersji php 
+daupdate csfcf			-- dodanie ip CloudFlare do allow ip oraz ignore w CSF
+
+
+daupdate dattl			-- DNS DA zmiana domyslnego TTL na 300 plus dla obecnych domen
+daupdate szukajdnsow-zewnetrznych -- listuje domeny i szuka czy maja dns3.hitme.net.pl jezeli nie tworzy liste domen jakie maja zewnetrzne dnsy
+daupdate one_click_pma          -- dopuszczenie logowania do phpmyadmina z panelu DA - one click
+daupdate pma-no-public     	-- PhpMyAdmin - wylaczenie publicznewgo dostepu do phpmyadmin - tylko z poziomu DA
+zstd 			        -- wlaczenie kompresji zstd dla backupow
+daupdate cen6_modsec_latka	-- poprawka modsec dla centos6 i problem z json format
+
+DirectAdmin
+daupdate eximsec1		-- aktualizacja exim, exim_conf, dovecot, dovecot_conf + poprawki bezpieczenstwa oraz RBL Malware.Expert
+daupdate antybots               -- dodatek do modsec z banowaniem bad bots
+
+DA skroty komned
+daupdate multi		       -- wykona synchronizacje lokalnych stref dns z multiserveami
+
+
+EXIM
+daupdate eximstats		-- troche info o serwerze poczty most of the emails are headed, either outbound or local
+one_click_webmail_login		-- logowanie w directadmin kliknieciem w login do panelu directadmin
+
+BUILD OPCJE DLA DirectAdmin
+daupdate buc                    -- (BUILD UPDATE CUSTOM ) ZALECANE DA CUSTOM aktualizacja - ./build update_versions BEZ MySQL i PHP
+daupdate buv			-- (BUILD SET_FASTEST UPDATE VERIONS ) DA ./build set_fastest & ./build update & ./build versions
+daupdate bu                     -- (BUILD UPDATE ) ./build update 
+daupdate bur                    -- (BUILD UPDATE REWRITE ) ./build update & ./build rewrite_confs
+daupdate bufull                 -- (BUILD UPDATE FULL ) aktualizacja PELNA z MYLSQ i PHP ./build update & ./build update_versions
+daupdate o                      -- wykonuje nano options.conf
+daupdate uexim                  -- (BUILD Exim i exim_conf) ./build update & ./build exim & ./build exim_conf
+daupdate udovecot               -- (BUILD Dovecot i dovecot_conf) DA ./build update & ./build dovecot & ./build dovecot_conf
+daupdate ued			-- (BUILD Exim, exim_conf, Dovecot i dovecot_conf) 
+
+SSL:
+daupdate ssl_hostname           --  generowanie lets encrypt na hostname
+daupdate lets			--  aktualizacja Lets Encrypt + Lego
+
+CSF
+daupdate dacsf_install          -- Instalacja CSF z konfiguracja od poralix
+daupdate dacsf_update           -- Aktualizacja CSF z konfiguracja od poralix
+
+MALWARE-EXPERT
+daupdate csf_me                 -- Dodatek do CSF instalacaj ipset + ipset_RBL listt od MalwarExpert
+daupdate modsec			-- skrypt instalacji modsec i malware.epert regulek
+
+BRUTEFORCE
+daupdate optda                  -- aktualizacja ustawien DA (bruteforce,delete ticket itd.)
+
+BRUTEFORCE + pma no public
+daupdate optda_all              -- aktualizacja ustawien DA (bruteforce,delete ticket itd.) + pma no public
+
+NOWE 2021
+daupdate eol6	         	-- aktualziacja EOL Centos 6 pakietow jak sudo, openssl, crul, libcurl
+daupdate netdata	 	-- instalacja netdata
+
+MalwareExpert
+daupdate csf_me   	        -- instalacaj ipset + zmiana w csf z zaladowaniem rbl list do csf od malwareexperta
+
+ŁATKI/PATCHE
+daupdate dalatka		-- łatki/poprawki do DA wersji 1.62 gdy problem z PHP, restartowaniem uslug
+
+
+"
+
+echo -e "${BLUE} $host ${NOCOLOR}";
+echo -e "Wersja daupdate ${RED} $VERSION ${NOCOLOR}";
+
+#echo "DAUPDATE wersja"
+#cat /etc/hitme_daupdatev
+
+
+            exit 1
+
+
+esac
+
+