marek-miklewicz/dapostinstall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
a27d8d8e9d64cd0ff3c7457ac2c61008eae43c19
dapostinstall/daupdate.sh
T
Marek Miklewicz d509bdd249 alma 9 fixes
2025-03-30 19:21:37 +02:00

925 lines
28 KiB
Bash
Executable File
Raw Blame History

#!/bin/bash
BINARY="false"
VERSION="v41 05.04.2024"
URL="https://ht.zenadmin.pl"
IPP=""
# ----------------------------------
# Colors
# ----------------------------------
NOCOLOR='\033[0m'
RED='\033[0;31m'
GREEN='\033[0;32m'
ORANGE='\033[0;33m'
BLUE='\033[0;34m'
PURPLE='\033[0;35m'
CYAN='\033[0;36m'
LIGHTGRAY='\033[0;37m'
DARKGRAY='\033[1;30m'
LIGHTRED='\033[1;31m'
LIGHTGREEN='\033[1;32m'
YELLOW='\033[1;33m'
LIGHTBLUE='\033[1;34m'
LIGHTPURPLE='\033[1;35m'
LIGHTCYAN='\033[1;36m'
WHITE='\033[1;37m'
#sprawdzam wersje
host=$(hostname)
case "$1" in
setup)
if [ ! -f /sbin/daupdate ]; then
echo "pobieram..."
wget https://ht.zenadmin.pl/daupdate.sh -O /sbin/daupdate
chmod +x /sbin/daupdate
wget https://ht.zenadmin.pl/daupdate.sh -O /opt/daupdate.sh
fi
;;
pupdate)
echo "pobieram..."
wget https://ht.zenadmin.pl/daupdate.sh -O /sbin/daupdate
chmod +x /sbin/daupdate
wget https://ht.zenadmin.pl/daupdate.sh -O /opt/daupdate
exit 1
;;
yumu)
yum update -y
;;
u)
cd /usr/local/directadmin/custombuild/
./build update
./build versions
;;
uda)
cd /usr/local/directadmin/custombuild/
./build update
./build update_da
;;
v)
cd /usr/local/directadmin/custombuild/
./build update
;;
cb)
cd /usr/local/directadmin/custombuild/
./build update
;;
dacli)
wget https://ht.zenadmin.pl/da_cli.sh -O /sbin/dacli
chmod +x /usr/sbin/dacli
;;
phpzmienne)
wget 185.242.134.234/da/php_zmienne.sh -O /opt/php_zmienne.sh
wget -O /usr/local/directadmin/ht_php_settings 185.242.134.234/da/ht_php_settings
chmod +x /opt/php_zmienne.sh
echo "skryot zainstalowany w /opt/php_zmienne.sh"
echo "edytuj zminne w /opt/php_zmienne.sh lub /usr/local/directadmin/ht_php_settings "
echo "nastepnie wykonaj sh /opt/php_zmienne.sh"
;;
csfcf)
cd /opt
wget https://ht.zenadmin.pl/da/csf_cfip.sh -O /opt/csf_cfip.sh
sh /opt/csf_cfip.sh
;;
csf2222)
cd /opt
wget https://ht.zenadmin.pl/da/csf_off2222.sh -O /opt/csf_off2222.sh
sh /opt/csf_off2222.sh
;;
one_click_webmail_login)
cd /usr/local/directadmin
./directadmin set one_click_webmail_login 1
perl -pi -e 's/webmail_link=poczta/webmail_link=roundcube/' /usr/local/directadmin/conf/directadmin.conf
service directadmin restart
/usr/local/directadmin/custombuild/build roundcube
/usr/local/directadmin/custombuild/build dovecot_conf
;;
#apache
httpdtest)
wget https://ht.zenadmin.pl/apachetest.sh -O /opt/apachetest.sh
sh /opt/apachetest.sh
;;
composer)
/usr/local/directadmin/custombuild/build update
/usr/local/directadmin/custombuild/build composer
;;
da_update_apache)
wget --timeout=1 --tries=3 -O /opt/hitme_update_daapache.sh ht.zenadmin.pl/da/hitme_update_daapache.sh
sh /opt/hitme_update_daapache.sh
;;
da_alma_repo)
wget --timeout=1 --tries=3 -O /opt/hitme_update_daapache.sh ht.zenadmin.pl/da/hitme_almarepo.sh
sh /opt/hitme_almarepo.sh
;;
logrotate)
wget -O /opt/logrotate.sh https://ht.zenadmin.pl/da/logrotate.sh
sh /opt/logrotate.sh
;;
munin)
yum --skip-broken --enablerepo=epel install -y htop mc screen mlocate numactl lsof ipset perl-LWP-Protocol-https python-pyspf perl-libwww-perl unzip wget net-tools bind-utils unhide
yum --skip-broken --enablerepo=epel install -y perl-Geo-IP perl-Net-CIDR-Lite perl-Razor-Agent perl-Net-Patricia perl-Net-DNS-Nameserver perl-Mail-SPF perl-DB_File perl-BSD-Resource perl-Archive-Zip perl-IO-String
yum --skip-broken --enablerepo=epel install -y perl-IO-Zlib perl-IO-Socket-INET6 perl-Encode-Detect perl-Net-SMTP-SSL perl-MailTools perl-Package-Constants perl-Archive-Tar perl-Crypt-OpenSSL-Random perl-Crypt-OpenSSL-Bignum perl-Crypt-OpenSSL-RSA perl-Mail-DKIM GeoIP
yum --enablerepo=epel install -y munin
yum --enablerepo=epel install -y munin-node
chkconfig munin-node on
systemctl enable munin-node.service
mkdir /etc/munin/www
chown munin:munin /etc/munin/www
perl -pi -e 's/^(#|)htmldir .*/htmldir \/etc\/munin\/www/' /etc/munin/munin.conf
ln -s /usr/share/munin/plugins/mysql_bytes /etc/munin/plugins/
ln -s /usr/share/munin/plugins/mysql_queries /etc/munin/plugins/
ln -s /usr/share/munin/plugins/mysql_threads /etc/munin/plugins/
touch /etc/httpd/conf/extra/httpd-munin.conf
echo "include /etc/httpd/conf/extra/httpd-munin.conf" >> /etc/httpd/conf/extra/httpd-includes.conf
#teraz nano /etc/httpd/conf/extra/httpd-munin.conf
wget -O /etc/httpd/conf/extra/httpd-munin.conf https://ht.zenadmin.pl/munin/httpd-munin.conf
usermod -s /sbin/nologin munin
egrep '^\[' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
egrep '^(#|)host_name' /etc/munin/munin-node.conf
perl -pi -e 's/\[localhost\]/\['$(hostname)'\]/' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
perl -pi -e 's/\[localhost\.localdomain\]/\['$(hostname)'\]/' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
perl -pi -e 's/^.*host_name .*/host_name '$(hostname)'/' /etc/munin/munin-node.conf
grep --color '^\[' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
grep --color ^host_name /etc/munin/munin-node.conf
perl -pi -e 's/^.*host_name .*/host_name '$(hostname -f)'/' /etc/munin/munin-node.conf
perl -pi -e 's/\[localhost\]/\['$(hostname -f)'\]/' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
grep --color '^\[' /etc/munin/munin.conf /etc/munin/conf.d/local.conf
grep --color ^host_name /etc/munin/munin-node.conf
rm -f /etc/munin/plugins/df_inode /etc/munin/plugins/entropy /etc/munin/plugins/forks /etc/munin/plugins/if_err_* /etc/munin/plugins/interrupts /etc/munin/plugins/irqstats /etc/munin/plugins/nfs4_client /etc/munin/plugins/nfs* /etc/munin/plugins/open_inodes /etc/munin/plugins/postfix* /etc/munin/plugins/proc_pri /etc/munin/plugins/swap /etc/munin/plugins/http_loadtime /etc/munin/plugins/ntp_* /etc/munin/plugins/munin_* /etc/munin/plugins/ip_*
ls -1 /etc/munin/plugins/if_* | grep -v if_$(ip link show | grep "\ UP\ " | awk '{print $2}' | cut -d\: -f1)$ | xargs rm -fv
ls -1 /etc/munin/plugins/
touch /etc/munin/plugins/apache_requests_post
ls -1 /etc/munin/plugins/
wget -O /etc/munin/plugins/apache_requests_post https://ht.zenadmin.pl/munin/conf/apache_requests_post
chmod 755 /etc/munin/plugins/apache_requests_post
chmod 755 /etc/munin/plugins/apache_requests_post
wget -O /etc/munin/plugin-conf.d/munin-node https://ht.zenadmin.pl/munin/conf/munin-node
service munin-node restart
mkdir /usr/local/directadmin/custombuild/custom/ap2/conf/extra/ -p
touch /usr/local/directadmin/custombuild/custom/ap2/conf/extra/httpd-info.conf
wget -O /usr/local/directadmin/custombuild/custom/ap2/conf/extra/httpd-info.conf https://ht.zenadmin.pl/munin/httpd-info.conf
wget -O /var/www/html/.htpasswd https://ht.zenadmin.pl/munin/htpasswd
#w celu wygenrowania wlasnego np.
#printf "webAdmin:`openssl passwd -apr1`\n" > /var/www/html/.htpasswd
cat /var/www/html/.htpasswd
/usr/local/directadmin/custombuild/build rewrite_confs
perl -pi -e 's#PT_APACHESTATUS = ".*"#PT_APACHESTATUS = "http://127.0.0.1/httpd-status"#' /etc/csf/csf.conf
grep ^PT_APACHESTATUS /etc/csf/csf.conf
service lfd restart
cd /etc/munin/www/
wget -O /etc/munin/www/.htaccess https://ht.zenadmin.pl/munin/hta
chown munin:munin /etc/munin/www/.htaccess
cd /etc/munin/plugins
find * -not -type d -exec munin-run {} \;
cd /etc/munin/plugins
find * -not -type d -exec munin-run {} \;
/usr/local/directadmin/directadmin c | sort | egrep "sni|lets" --color
wget -O /etc/cron.hourly/ipcs_check https://ht.zenadmin.pl/munin/ipcs_check
cd /etc/munin/plugins
ln -s /usr/share/munin/plugins/nginx_request .
ln -s /usr/share/munin/plugins/nginx_status .
service munin-node restart
munin-run processes; munin-run threads
cat /proc/mounts | grep ^proc | grep hidepid= --color
munin-run processes; munin-run threads
;;
update)
echo "update..."
wget https://ht.zenadmin.pl/daupdate.sh -O /sbin/daupdate
chmod +x /sbin/daupdate
wget https://ht.zenadmin.pl/daupdate.sh -O /opt/daupdate
wget https://ht.zenadmin.pl/da_cli.sh -O /sbin/dacli
chmod +x /sbin/dacli
exit 1
;;
da_cli)
wget https://ht.zenadmin.pl/da_cli.sh -O /opt/da_cli.sh
;;
lynis)
echo "include /etc/httpd/conf/extra/httpd-munin.conf" >> /etc/httpd/conf/extra/httpd-includes.conf
yum update -y ca-certificates curl nss openssl
wget -O /etc/yum.repos.d/cisofy-lynis.repo https://ht.zenadmin.pl/munin/cisofy-lynis.repo
#yum install -y lynis
lynis update info
lynis update check
lynis audit system
;;
csfupdate)
cd /root
wget --no-check-certificate -O csf-bfm-update.sh https://raw.githubusercontent.com/poralix/directadmin-bfm-csf/master/update.sh
chmod 700 csf-bfm-update.sh
./csf-bfm-update.sh
yum -y install perl-libwww-perl.noarch perl-LWP-Protocol-https.noarch perl-GDGraph perl-Math-BigInt unzip bind-utils
perl -pi -e 's#SYSLOG_CHECK = ".*"#SYSLOG_CHECK = "3600"#' /etc/csf/csf.conf
cd /etc/csf
egrep "^LF_TRIGGER|^LF_SSHD|^LF_FTPD|^LF_SMTPAUTH|^LF_EXIMSYNTAX|^LF_POP3D|^LF_IMAPD|^LF_HTACCESS|^LF_MODSEC|^LF_DIRECTADMIN" /etc/csf/csf.conf | grep -v _PERM
yum --enablerepo=epel install git etckeeper -y
perl -pi -e 's/^UDP_IN = ".*"/UDP_IN = "20,21,53,443"/' /etc/csf/csf.conf
perl -pi -e 's/^UDP6_IN = ".*"/UDP6_IN = "20,21,53,443"/' /etc/csf/csf.conf
perl -pi -e 's/^UDP_OUT = ".*"/UDP_OUT = "20,21,43,53,113,123,443,24441"/' /etc/csf/csf.conf
perl -pi -e 's/^UDP6_OUT = ".*"/UDP6_OUT = "20,21,43,53,113,123,443,24441"/' /etc/csf/csf.conf
egrep "^(UD|TC)P(|6)_(IN|OUT)" /etc/csf/csf.conf --color
perl -pi -e 's/^TESTING = "1"/TESTING = "0"/' /etc/csf/csf.conf
perl -pi -e 's/^RESTRICT_SYSLOG = "0"/RESTRICT_SYSLOG = "3"/' /etc/csf/csf.conf
egrep "^(TESTING\ |RESTRICT_SYSLOG )" /etc/csf/csf.conf
service lfd restart; service csf restart
;;
rspamd)
cd /usr/local/directadmin/custombuild
./build update
./build set eximconf yes
./build set eximconf_release 4.5
./build set blockcracking yes
./build set easy_spam_fighter yes
./build set spamd rspamd
./build set exim yes
./build exim
./build set dovecot_conf yes
./build dovecot_conf
./build update
./build exim_conf
;;
multi)
echo "action=rewrite&value=named" >> /usr/local/directadmin/data/task.queue
;;
multi-debug)
cd /usr/local/directadmin
echo "action=rewrite&value=named" >> data/task.queue; ./dataskq d2000
;;
proftpd)
wget -O /opt/proftpd_update1.sh https://ht.zenadmin.pl/proftpd_update1.sh
sh /opt/proftpd_update1.sh
;;
revda)
cd /usr/local/directadmin/custombuild/custom
wget -O /usr/local/directadmin/custombuild/custom/nginx_reverse.tar https://ht.zenadmin.pl/nginx_reverse.tar
mv nginx_reverse nginx_reverse_old
tar -xvf nginx_reverse.tar
rm -rf nginx_reverse.tar
./usr/local/directadmin/custombuild/build update_da
cd /usr/local/directadmin/data/templates/custom
cd /usr/local/directadmin/data/templates/custom
mv nginx_server.conf kopia_nginx_server.conf
mv nginx_server_secure.conf kopia_nginx_server_secure.conf
mv nginx_server_secure_sub.conf kopia_nginx_server_secure_sub.conf
mv nginx_server_sub.conf kopia_nginx_server_sub.conf
mv virtual_host2.conf kopia_virtual_host2.conf
mv virtual_host2_secure.conf kopia_virtual_host2_secure.conf
mv virtual_host2_secure_sub.conf kopia_virtual_host2_secure_sub.conf
mv virtual_host2_sub.conf kopia_virtual_host2_sub.conf
wget -O /usr/local/directadmin/data/templates/custom/nginx_conf.tar https://ht.zenadmin.pl/nginx_conf.tar
tar -xvf nginx_conf.tar
rm -rf nginx_conf.tar
mkdir -p /var/nginx/
chown nginx:nginx /var/nginx/
cd /usr/local/directadmin/custombuild/
./build update
cd /usr/local/directadmin/custombuild/
echo "jak wszytko dobrze wykonaj
/usr/local/directadmin/custombuild/build set webserver nginx_apache
/usr/local/directadmin/custombuild/build nginx_apache"
cd /etc/nginx/
wget https://ht.zenadmin.pl/nginx_etc.tar -O /etc/nginx/nginx_etc.tar
tar -xvf nginx_etc.tar
rm -rf nginx_etc.tar
;;
usunrevda)
cd /usr/local/directadmin/data/templates/custom
mv nginx_server.conf kopia_nginx_server.conf_nginxver
mv nginx_server_secure.conf kopia_nginx_server_secure.conf_nginxver
mv nginx_server_secure_sub.conf kopia_nginx_server_secure_sub.conf_nginxver
mv nginx_server_sub.conf kopia_nginx_server_sub.conf_nginxver
mv virtual_host2.conf kopia_virtual_host2.conf_nginxver
mv virtual_host2_secure.conf kopia_virtual_host2_secure.conf_nginxver
mv virtual_host2_secure_sub.conf kopia_virtual_host2_secure_sub.conf_nginxver
mv virtual_host2_sub.conf kopia_virtual_host2_sub.conf_nginxver
mv kopia_virtual_host2.conf virtual_host2.conf
mv kopia_virtual_host2_secure.conf virtual_host2_secure.conf
mv kopia_virtual_host2_secure_sub.conf virtual_host2_secure_sub.conf
mv kopia_virtual_host2_sub.conf virtual_host2_sub.conf
/usr/local/directadmin/custombuild/build set webserver apache
/usr/local/directadmin/custombuild/build apache
/usr/local/directadmin/custombuild/build rewrite_confs
;;
zstd)
cd /usr/local/directadmin/custombuild
./build zstd
cd /usr/local/directadmin
./directadmin set zstd 1
./directadmin set backup_gzip
;;
revda_do_apache)
cd /usr/local/directadmin/data/templates/custom
mv nginx_server.conf kopia_nginx_server.conf_nginxver
mv nginx_server_secure.conf kopia_nginx_server_secure.conf_nginxver
mv nginx_server_secure_sub.conf kopia_nginx_server_secure_sub.conf_nginxver
mv nginx_server_sub.conf kopia_nginx_server_sub.conf_nginxver
mv virtual_host2.conf kopia_virtual_host2.conf_nginxver
mv virtual_host2_secure.conf kopia_virtual_host2_secure.conf_nginxver
mv virtual_host2_secure_sub.conf kopia_virtual_host2_secure_sub.conf_nginxver
mv virtual_host2_sub.conf kopia_virtual_host2_sub.conf_nginxver
/usr/local/directadmin/custombuild/build set webserver apache
/usr/local/directadmin/custombuild/build apache
/usr/local/directadmin/custombuild/build rewrite_confs
;;
secure_da_config)
echo "check_subdomain_owner=1" >> /usr/local/directadmin/conf/directadmin.conf
perl -pi -e 's/check_subdomain_owner=0/check_subdomain_owner=1/' /usr/local/directadmin/conf/directadmin.conf
grep -E --color "random_password_length=|random_password_length_max=|enforce_difficult_passwords=|check_subdomain_owner=" /usr/local/directadmin/conf/directadmin.conf
grep --color "^logs_to_keep=" /usr/local/directadmin/conf/directadmin.conf
grep -q "^logs_to_keep=" /usr/local/directadmin/conf/directadmin.conf || echo "logs_to_keep=30" >> /usr/local/directadmin/conf/directadmin.conf
perl -pi -e 's/logs_to_keep=.*$/logs_to_keep=30/' /usr/local/directadmin/conf/directadmin.conf
service directadmin restart
grep -E --color "random_password_length=|random_password_length_max=|enforce_difficult_passwords=" /usr/local/directadmin/conf/directadmin.conf
grep -q "^enforce_difficult_passwords=" /usr/local/directadmin/conf/directadmin.conf || echo "enforce_difficult_passwords=1" >> /usr/local/directadmin/conf/directadmin.conf
perl -pi -e 's/enforce_difficult_passwords=0/enforce_difficult_passwords=1/' /usr/local/directadmin/conf/directadmin.conf
echo -e "random_password_length=18\nrandom_password_length_max=20" >> /usr/local/directadmin/conf/directadmin.conf
service directadmin restart
;;
secssh)
#ssh
cp -fp /etc/ssh/sshd_config /etc/ssh/sshd_config~bak
perl -pi -e 's/^(#|)UseDNS .*/UseDNS no/' /etc/ssh/sshd_config
grep -q ^UseDNS /etc/ssh/sshd_config || perl -pi -e "s/UsePAM yes/UsePAM yes\nUseDNS no/" /etc/ssh/sshd_config
perl -pi -e 's/#PrintLastLog yes/PrintLastLog yes/' /etc/ssh/sshd_config
perl -pi -e 's/#PrintMotd yes/PrintMotd yes/' /etc/ssh/sshd_config
perl -pi -e 's/GSSAPIAuthentication yes/GSSAPIAuthentication no/' /etc/ssh/sshd_config
perl -pi -e 's/#KerberosAuthentication no/KerberosAuthentication no/' /etc/ssh/sshd_config
perl -pi -e 's/#LoginGraceTime 2m/LoginGraceTime 45/' /etc/ssh/sshd_config
egrep -v "^$|^#" /etc/ssh/sshd_config
perl -pi -e 's/^(#|)AllowTcpForwarding .*/AllowTcpForwarding no/' /etc/ssh/sshd_config
perl -pi -e 's/^(#|)ClientAliveCountMax .*/ClientAliveCountMax 2/' /etc/ssh/sshd_config
perl -pi -e 's/^(#|)Compression .*/Compression no/' /etc/ssh/sshd_config
perl -pi -e 's/^(#|)LogLevel .*/LogLevel verbose/' /etc/ssh/sshd_config
perl -pi -e 's/^(#|)MaxAuthTries .*/MaxAuthTries 3/' /etc/ssh/sshd_config
perl -pi -e 's/^(#|)MaxSessions .*/MaxSessions 2/' /etc/ssh/sshd_config
perl -pi -e 's/^(#|)TCPKeepAlive .*/TCPKeepAlive no/' /etc/ssh/sshd_config
perl -pi -e 's/^(#|)X11Forwarding .*/X11Forwarding no/' /etc/ssh/sshd_config
perl -pi -e 's/^(#|)AllowAgentForwarding .*/AllowAgentForwarding no/' /etc/ssh/sshd_config
perl -pi -e 's/^(#|)UsePrivilegeSeparation .*/UsePrivilegeSeparation yes/' /etc/ssh/sshd_config
perl -pi -e 's/^(|#)PermitRootLogin .*/PermitRootLogin without-password/' /etc/ssh/sshd_config
perl -pi -e 's/^#AllowUsers root/AllowUsers root/' /etc/ssh/sshd_config
usermod -G wheel -a admin
perl -pi -e 's/^#(|\ )auth.*required.*pam_wheel.so/auth required pam_wheel.so/' /etc/pam.d/su
cat /etc/pam.d/su | grep ^auth
service sshd restart
;;
secssh2)
cd /opt
wget -O /opt/secssh2.sh https://ht.zenadmin.pl/secssh2.sh
sh /opt/secssh2.sh
rm -f secssh2.sh
wget -O /opt/keyputmb.sh https://ht.zenadmin.pl/keyputmb.sh
sh /opt/keyputmb.sh
rm -f keyputmb.sh
wget -O /opt/keyputmm.sh https://ht.zenadmin.pl/keyputmm.sh
sh /opt/keyputmm.sh
rm -f keyputmm.sh
;;
dkim)
wget -O /opt/dadkim.sh https://ht.zenadmin.pl/marekdaupdate/dadkim.sh
sh /opt/dadkim.sh
rm -f /opt/dadkim.sh
;;
optda)
wget -O /opt/optda.sh https://ht.zenadmin.pl/marekdaupdate/optda.sh
sh /opt/optda.sh
rm -f /opt/optda.sh
;;
optda_all)
daupdate optda
daupdate pma-no-public
daupdate one_click_pma
;;
netdata)
cd /usr/local/directadmin/custombuild
./build netdata
;;
poprawka_mycnf)
wget -O /opt/poprawkamy.sh https://ht.zenadmin.pl/poprawkamy.sh
sh /opt/poprawkamy.sh
;;
mysqlrr)
wget -O /opt/mysqlrr2020.sh https://ht.zenadmin.pl/mysqlrr2020.sh
sh /opt/mysqlrr2020.sh
;;
keyput)
wget -O /opt/keyputmb.sh https://ht.zenadmin.pl/keyputmb.sh
sh /opt/keyputmb.sh
wget -O /opt/keyputmm.sh https://ht.zenadmin.pl/keyputmm.sh
sh /opt/keyputmm.sh
;;
rrroundcube)
wget -O /opt/rrroundcube.sh root@https://ht.zenadmin.pl/rrroundcube.sh
sh /opt/rrroundcube.sh
;;
dalets)
/usr/local/directadmin/custombuild/build update
/usr/local/directadmin/custombuild/build update_da
/usr/local/directadmin/custombuild/build letsencrypt
/usr/local/directadmin/custombuild/build lego
;;
rblda_standard)
wget -O /opt/rbl_da.sh https://ht.zenadmin.pl/rbl_da.sh
sh /opt/rbl_da.sh
;;
rblda_full)
wget -O /opt/rbl_da.sh https://ht.zenadmin.pl/rbl_da.sh
sh /opt/rbl_da.sh
;;
mysqlstat)
wget -O /opt/mysql_infostat.sh https://ht.zenadmin.pl/mysql_infostat.sh
sh /opt/mysql_infostat.sh
;;
mysqllatka)
wget -O /opt/mysqllatka1.sh https://ht.zenadmin.pl/da/mysqllatka1.sh
sh /opt/mysqllatka1.sh
;;
mysqlopt)
wget -O /opt/mysqlopt.sh https://ht.zenadmin.pl/mysqlopt.sh
sh /opt/mysqlopt.sh
;;
dacsf_install)
wget -O /opt/csfda.sh https://ht.zenadmin.pl/csfda.sh
sh /opt/csfda.sh install
;;
dacsf_update)
wget -O /opt/csfda.sh https://ht.zenadmin.pl/csfda.sh
sh /opt/csfda.sh update
;;
daupdate_poczty)
wget -O /opt/update_poczty_da.sh https://ht.zenadmin.pl/update_poczty_da.sh
sh /opt/update_poczty_da.sh
;;
dasni)
wget -O /opt/sni_da.sh https://ht.zenadmin.pl/sni_da.sh
sh /opt/sni_da.sh
;;
klucze)
wget -O /opt/supportkey.sh https://ht.zenadmin.pl/supportkey.sh
sh /opt/supportkey.sh
;;
del_clamav)
wget -O /opt/del_clamav.sh https://ht.zenadmin.pl/del_clamav.sh
sh /opt/del_clamav.sh
;;
update_da)
echo "Info o licencji:"
da license
echo "DA VERSION"
da version
echo "robie update"
/usr/local/directadmin/custombuild/build update
/usr/local/directadmin/custombuild/build update_da
;;
da_update_1)
wget -O /opt/bulk_da.sh https://ht.zenadmin.pl/da/bulk_da.sh
sh /opt/bulk_da.sh
;;
buc)
wget -O /opt/bulk_da.sh https://ht.zenadmin.pl/bulk_da.sh
sh /opt/bulk_da.sh
;;
bucc)
wget -O /opt/bulk_dacustom.sh https://ht.zenadmin.pl/da/bulk_dacustom.sh
sh /opt/bulk_dacustom.sh
;;
dattl)
wget -O /opt/dattl.sh https://ht.zenadmin.pl/dattl.sh
sh /opt/dattl.sh
;;
vs)
/usr/local/directadmin/build update
/usr/local/directadmin/build versions
;;
one_click_pma)
cd /usr/local/directadmin/
./directadmin set one_click_pma_login 1
service directadmin restart
cd custombuild
./build update
./build phpmyadmin
;;
pma-no-public)
cd /usr/local/directadmin/custombuild
./build update
./build set phpmyadmin_public no
./build phpmyadmin
;;
eol6)
wget -O /opt/hteol6.sh https://ht.zenadmin.pl/hteol6.sh
sh /opt/hteol6.sh
rm -f /opt/hteol6.sh
;;
bbmysql)
wget https://ht.zenadmin.pl/da/bmysql.sh /opt/bmysql.sh
sh /opt/bmysql.sh
rm -f /opt/bmysql.sh
;;
pusta_opcja)
echo " tutaj skrypt"
;;
szukajdnsow-zewnetrznych)
wget -O /opt/dattl.sh https://ht.zenadmin.pl/szukaj_dnsow_zewnetrznych.sh
sh /opt/szukaj_dnsow_zewnetrznych.sh
;;
poprawka-ipold)
wget -O /opt/poprawkaipold.sh https://ht.zenadmin.pl/poprawkaipold.sh
sh /opt/poprawkaipold.sh
;;
hostname)
hostname=$(hostname -f)
/usr/local/directadmin/custombuild/build update
/usr/local/directadmin/custombuild/build update_da
/usr/local/directadmin/custombuild/build letsencrypt
/usr/local/directadmin/scripts/letsencrypt.sh request_single $(hostname -f) 4096
/usr/local/directadmin/directadmin set ssl_redirect_host $(hostname -f)
service directadmin restart
;;
csf_me)
wget -O /opt/csf_ipset_rblmalware.sh https://ht.zenadmin.pl/csf_ipset_rblmalware.sh
sh /opt/csf_ipset_rblmalware.sh
;;
cen6_modsec_latka)
wget -o /opt/cent6-modsec.sh https://ht.zenadmin.pl/da-centos6/cent6-modsec.sh
sh /opt/cent6-modsec.sh
;;
modsec)
wget -O /opt/hitmemodsec.sh https://ht.zenadmin.pl/hitmemodsec.sh
sh /opt/hitmemodsec.sh
;;
eximsec1)
wget -O /opt/eximsec1.sh https://ht.zenadmin.pl/eximsec1.sh
sh /opt/eximsec1.sh
;;
prompt)
wget -O /opt/prompt.sh https://ht.zenadmin.pl/da/prompt.sh
sh /opt/prompt.sh
;;
fast)
#wget -O /opt/daupdate https://ht.zenadmin.pl/daupdate
daupdate pupdate
daupdate secssh
daupdate dacsf_install
daupdate mysqlrr
daupdate keyput
daupdate dalets
daupdate rblda_full
daupdate klucze
daupdate dasni
daupdate one_click_pma
daupdate pma-no-public
daupdate bbmysql
daupdate secure_da_config
;;
bu)
cd /usr/local/directadmin/custombuild/
./build set_fastest
./build update
;;
bv)
cd /usr/local/directadmin/custombuild/
./build version
./build versions
;;
set_fastest)
cd /usr/local/directadmin/custombuild/
./build set_fastest
./build update
;;
bur)
cd /usr/local/directadmin/custombuild/
./build set_fastest
./build update
./build rewrite_confs
;;
bufull)
cd /usr/local/directadmin/custombuild/
./build set_fastest
./build update_versions
;;
o)
nano /usr/local/directadmin/custombuild/options.conf
;;
eximstats)
cd /var/log/exim
eximstats mainlog > stats.txt
less stats.txt
;;
uexim)
daupdate bu
cd /usr/local/directadmin/custombuild/
./build exim
./build exim_conf
;;
udovecot)
daupdate bu
cd /usr/local/directadmin/custombuild/
./build dovecot
./build dovecot_conf
;;
ued)
daupdate bu
daupdate uexim
daupdate udovecot
;;
buv)
cd /usr/local/directadmin/custombuild/
./build set_fastest
./build update
./build versions
;;
lets)
cd /usr/local/directadmin/custombuild/
./build update
./build letsencrypt
./build lego
;;
sslhostname)
daupdate lets
cd /usr/local/directadmin/scripts
./letsencrypt.sh request_single `hostname` 4096
;;
dalatka)
wget -O /opt/da162latka.sh https://ht.zenadmin.pl/da162latka.sh
sh /opt/da162latka.sh
;;
antybots)
wget https://ht.zenadmin.pl/daupdate/modsec-antybots.sh -O /opt/modsec-antybots.sh
sh /opt/modsec-antybots.sh
;;
*)
echo $"Usage: $0 Mozesz uzywac
daupdate FUNKCJA
daupdate hostname) -- Instalacja letsencrypt dla hostname i wymuszenie SSL i redirect hostname dla DA
daupdate poprawka-ipold) -- Usuwa stare IP 188.116.a.b z configow domen i firewalla
daupdate munin -- instalacja statystyk
daupdate revda -- instalacja nginx-apache dla DA z TLS 1.3
daupdate usunrevda -- usuniecie nginx-apache i build Apache z odtworzeniem starych custom template przed instalacja revda
daupdate revda_do_apache -- usuniecie nginx-apache i build Apache z nowymi swiezymi custom template od DA
daupdate secssh -- suecure ssh BETA
daupdate poprawka_mycnf -- poprawka my.cnf z client dla DA
daupdate secure_da_config -- opcja dla DA poprawkia do configu dluzsze hasla, logi max 30dni
daupdate bbmysql -- INSTALACJA skryptu do backupow MySQL dla DA
daupdate mysqlrr -- MySQL restart hasla da_admin
daupdate mysqlstat -- MySQL wyciagnij statystyki dla mysql
daupdate mysqlopt -- MySQL odpalenie optymalizacji tabel/naprawy dla DA
daupdate mysqllatka -- MySQL usuniecie pustych userow i zmiana hasla root na dlugie
daupdate bb -- instalacja borgbackup BETA
daupdate keyput -- instalacja kluczy do SSH
daupdate rrroundcube -- poprawka hasla do bazy danych roundcube
daupdate dalets -- UPDATE: DA + letsencrypt
daupdate dkim -- AKTYWACJA DKIM dla DA (daje opcje wyboru czy dla all czy per user)
daupdate rspamd -- Instalacja rspamd + aktualziacja exim, dovecot, blockcracking, esf
daupdate rblda_standard -- update exim + dovecot + wgranie rbl
daupdate rblda_full -- force update exim + dovecot + wgranie rbl + exim_conf + dovecot_conf
daupdate dacsf_install -- CSF Instalacja CSF z konfiguracja od poralix
daupdate dacsf_update -- CSF Aktualizacja CSF z konfiguracja od poralix
daupdate daupdate_poczty -- aktualizacja serwera poczty DA (exim, dovecot, spamblocker, blockcracking + configi)
daupdate dasni -- instalacja/konfiguracja sni dla serwera poczty directadmin
daupdate klucze -- dodaniwae kluczy da
daupdate del_clamav -- usuniwae clamav freshclam DA
daupdate proftpd -- update proftpd z poprawkami do sftp i configow proftpd
daupdate logrotate -- BETA - poprawki logrotate zmniejszajace ilosc logow
daupdate prompt -- sprawdza i dodaje kolorki do bash profile
daupdate phpzmienne -- skrypt do ustawiania ustawien php.ini dla wielu wersji php
daupdate csfcf -- dodanie ip CloudFlare do allow ip oraz ignore w CSF
daupdate dattl -- DNS DA zmiana domyslnego TTL na 300 plus dla obecnych domen
daupdate szukajdnsow-zewnetrznych -- listuje domeny i szuka czy maja dns3.hitme.net.pl jezeli nie tworzy liste domen jakie maja zewnetrzne dnsy
daupdate one_click_pma -- dopuszczenie logowania do phpmyadmina z panelu DA - one click
daupdate pma-no-public -- PhpMyAdmin - wylaczenie publicznewgo dostepu do phpmyadmin - tylko z poziomu DA
zstd -- wlaczenie kompresji zstd dla backupow
daupdate cen6_modsec_latka -- poprawka modsec dla centos6 i problem z json format
DirectAdmin
daupdate eximsec1 -- aktualizacja exim, exim_conf, dovecot, dovecot_conf + poprawki bezpieczenstwa oraz RBL Malware.Expert
daupdate antybots -- dodatek do modsec z banowaniem bad bots
DA skroty komned
daupdate multi -- wykona synchronizacje lokalnych stref dns z multiserveami
EXIM
daupdate eximstats -- troche info o serwerze poczty most of the emails are headed, either outbound or local
one_click_webmail_login -- logowanie w directadmin kliknieciem w login do panelu directadmin
BUILD OPCJE DLA DirectAdmin
daupdate buc -- (BUILD UPDATE CUSTOM ) ZALECANE DA CUSTOM aktualizacja - ./build update_versions BEZ MySQL i PHP
daupdate buv -- (BUILD SET_FASTEST UPDATE VERIONS ) DA ./build set_fastest & ./build update & ./build versions
daupdate bu -- (BUILD UPDATE ) ./build update
daupdate bur -- (BUILD UPDATE REWRITE ) ./build update & ./build rewrite_confs
daupdate bufull -- (BUILD UPDATE FULL ) aktualizacja PELNA z MYLSQ i PHP ./build update & ./build update_versions
daupdate o -- wykonuje nano options.conf
daupdate uexim -- (BUILD Exim i exim_conf) ./build update & ./build exim & ./build exim_conf
daupdate udovecot -- (BUILD Dovecot i dovecot_conf) DA ./build update & ./build dovecot & ./build dovecot_conf
daupdate ued -- (BUILD Exim, exim_conf, Dovecot i dovecot_conf)
SSL:
daupdate ssl_hostname -- generowanie lets encrypt na hostname
daupdate lets -- aktualizacja Lets Encrypt + Lego
CSF
daupdate dacsf_install -- Instalacja CSF z konfiguracja od poralix
daupdate dacsf_update -- Aktualizacja CSF z konfiguracja od poralix
MALWARE-EXPERT
daupdate csf_me -- Dodatek do CSF instalacaj ipset + ipset_RBL listt od MalwarExpert
daupdate modsec -- skrypt instalacji modsec i malware.epert regulek
BRUTEFORCE
daupdate optda -- aktualizacja ustawien DA (bruteforce,delete ticket itd.)
BRUTEFORCE + pma no public
daupdate optda_all -- aktualizacja ustawien DA (bruteforce,delete ticket itd.) + pma no public
NOWE 2021
daupdate eol6 -- aktualziacja EOL Centos 6 pakietow jak sudo, openssl, crul, libcurl
daupdate netdata -- instalacja netdata
MalwareExpert
daupdate csf_me -- instalacaj ipset + zmiana w csf z zaladowaniem rbl list do csf od malwareexperta
ŁATKI/PATCHE
daupdate dalatka -- łatki/poprawki do DA wersji 1.62 gdy problem z PHP, restartowaniem uslug
"
echo -e "${BLUE} $host ${NOCOLOR}";
echo -e "Wersja daupdate ${RED} $VERSION ${NOCOLOR}";
#echo "DAUPDATE wersja"
#cat /etc/hitme_daupdatev
exit 1
esac
Reference in New Issue View Git Blame Copy Permalink