From cc0b624944143183c4910c4bc900a4f7e5fee134 Mon Sep 17 00:00:00 2001 From: lian Date: Wed, 25 Aug 2021 17:58:27 +0800 Subject: [PATCH] update --- .travis.yml | 15 - Dockerfile | 18 - Makefile | 4 - README.md | 99 +-- db-backup/db-list.txt | 3 - db-backup/db_backup.sh | 20 - db-backup/table-ignore.txt | 11 - images/system-admin-entrance.png | Bin 0 -> 26967 bytes ....1-ubuntu-amd64-http => seafile-7.1_ubuntu | 0 ....0-ubuntu-amd64-http => seafile-8.0_ubuntu | 33 +- seafile-server-7.1-centos-amd64-http | 616 ----------------- seafile-server-8.0-centos-amd64-http | 623 ------------------ seafile-server-centos-7-amd64-http | 623 ------------------ seafile-server-ubuntu-amd64-http | 532 --------------- startssl-certificate-generator | 169 ----- tests/assert.sh | 139 ---- tests/post-deploy_test.sh | 5 - 17 files changed, 32 insertions(+), 2878 deletions(-) delete mode 100644 .travis.yml delete mode 100644 Dockerfile delete mode 100644 Makefile delete mode 100644 db-backup/db-list.txt delete mode 100755 db-backup/db_backup.sh delete mode 100644 db-backup/table-ignore.txt create mode 100644 images/system-admin-entrance.png rename seafile-server-7.1-ubuntu-amd64-http => seafile-7.1_ubuntu (100%) rename seafile-server-8.0-ubuntu-amd64-http => seafile-8.0_ubuntu (94%) delete mode 100644 seafile-server-7.1-centos-amd64-http delete mode 100644 seafile-server-8.0-centos-amd64-http delete mode 100644 seafile-server-centos-7-amd64-http delete mode 100644 seafile-server-ubuntu-amd64-http delete mode 100644 startssl-certificate-generator delete mode 100644 tests/assert.sh delete mode 100755 tests/post-deploy_test.sh diff --git a/.travis.yml b/.travis.yml deleted file mode 100644 index 95504a5..0000000 --- a/.travis.yml +++ /dev/null @@ -1,15 +0,0 @@ -sudo: required -language: bash - -services: - - docker - -env: - global: - - LANG=en_US.UTF-8 - - LC_ALL=en_US.UTF-8 - -before_install: - - docker run xiez/seafile-pro:v1.2 /bin/bash -c "export TERM=xterm && echo 2 | bash seafile-server-ubuntu-14-04-amd64-http 5.1.10" - -script: make test diff --git a/Dockerfile b/Dockerfile deleted file mode 100644 index 5bfc1fb..0000000 --- a/Dockerfile +++ /dev/null @@ -1,18 +0,0 @@ -FROM ubuntu:14.04 -MAINTAINER Zheng Xie - -RUN apt-get update -RUN apt-get install -y sudo wget python-pip python-setuptools python-imaging python-mysqldb python-ldap python-urllib3 \ -openjdk-7-jre memcached python-memcache pwgen curl openssl poppler-utils libpython2.7 libreoffice \ -libreoffice-script-provider-python ttf-wqy-microhei ttf-wqy-zenhei xfonts-wqy nginx - -# Avoid ERROR: invoke-rc.d: policy-rc.d denied execution of start. -RUN echo "#!/bin/sh\nexit 0" > /usr/sbin/policy-rc.d - -WORKDIR /root -ADD . /root/ - -ADD https://download.seafile.com/d/6e5297246c/files/?p=/pro/seafile-pro-server_5.1.10_x86-64.tar.gz&dl=1 /opt/seafile-pro-server_5.1.10_x86-64.tar.gz - -# Clean up for smaller image -RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \ No newline at end of file diff --git a/Makefile b/Makefile deleted file mode 100644 index e5d0fef..0000000 --- a/Makefile +++ /dev/null @@ -1,4 +0,0 @@ -.PHONY: all test clean - -test: - tests/post-deploy_test.sh diff --git a/README.md b/README.md index 632b975..6aabd2e 100644 --- a/README.md +++ b/README.md @@ -1,60 +1,37 @@ -[![Build Status](https://travis-ci.org/haiwen/seafile-server-installer-cn.svg?branch=master)](https://travis-ci.org/haiwen/seafile-server-installer-cn) - # Seafile 安装脚本 -这里的安装脚本可以帮助您快速的安装好 Seafile 服务器，并配置好 MariaDB, Memcached, WebDAV, Ngnix 和开机自动启动脚本。 +一键安装脚本可以帮助您在 Ubuntu 18.04/20.04 系统上快速的安装好 Seafile 服务器，并配置好 MariaDB, Memcached, WebDAV, Ngnix 和开机自动启动脚本。 + ## 使用步骤 -安装干净的 Ubuntu 16.04/18.04 或 CentOS 7/8 系统，并**做好镜像** (如果安装失败需要还原到镜像)。 +安装干净的 Ubuntu 18.04/20.04，并**做好镜像** (如果安装失败需要还原到镜像)。 + +切换成 root 账号 (`sudo -i`) -切换成 root 账号 (sudo -i) ### 获取安装脚本 -- 适用于 Seafile 7.1.x 及以上版本 +适用于 Seafile 8.0.x 及以上版本 - Ubuntu 18.04 (64bit): - ```sh - wget https://raw.githubusercontent.com/haiwen/seafile-server-installer-cn/master/seafile-server-7.1-ubuntu-amd64-http - ``` - - CentOS 8 (64bit): - ```sh - wget https://raw.githubusercontent.com/haiwen/seafile-server-installer-cn/master/seafile-server-7.1-centos-amd64-http - ``` - -- 适用于 Seafile 6.x.x 及以上版本 - - Ubuntu 16.04/18.04 (64bit): - ```sh - wget https://raw.githubusercontent.com/haiwen/seafile-server-installer-cn/master/seafile-server-ubuntu-amd64-http - ``` - - CentOS 7 (64bit): - ```sh - wget https://raw.githubusercontent.com/haiwen/seafile-server-installer-cn/master/seafile-server-centos-7-amd64-http - ``` - -### 运行安装脚本并指定要安装的版本 (例如 6.0.13) - -Ubuntu 16.04/18.04 (64bit): -``` -bash seafile-server-ubuntu-amd64-http 6.0.13 +```sh +wget https://raw.githubusercontent.com/haiwen/seafile-server-installer-cn/master/seafile-8.0_ubuntu ``` -CentOS 7 (64bit): +### 运行安装脚本并指定要安装的版本 (例如 8.0.0) + ``` -bash seafile-server-centos-7-amd64-http 6.0.13 +bash seafile-8.0_ubuntu 8.0.0 ``` 脚本会让您选择要安装的版本, 按照提示进行选择即可: -* 如果要安装专业版, 需要先将下载好的专业版的包 `seafile-pro-server_6.0.13_x86-64.tar.gz` 放到 `/opt/` 目录下 +* 如果要安装专业版, 需要先将下载好的专业版的包 `seafile-pro-server_8.0.0_x86-64.tar.gz` 放到 `/opt/` 目录下 * 如果是安装开源版，安装脚本在执行过程中会检查 `/opt`目录下是否有指定版本号的安装包，如果存在则会安装此包，否则会从 Seafile 网站下载。所以，为了避免因下载失败而导致安装中断，您可以提前下载好安装包放到`/opt/`目录下。 该脚本运行完后会在命令行中打印配置信息和管理员账号密码，请仔细阅读。(您也可以查看安装日志`/opt/seafile/aio_seafile-server.log`)，MySQL 的 root 用户密码存储在 `/root/.my.cnf` 中；MySQL 的 seafile 用户密码存储在 `/opt/seafile.my.cnf` 中。 + ### 通过 Web UI 对服务器进行配置 安装完成后，您需要通过 Web UI 服务器进行基本的配置，以便能正常的从网页端进行文件的上传和下载： @@ -62,67 +39,27 @@ bash seafile-server-centos-7-amd64-http 6.0.13 1. 首先在浏览器中输入服务器的地址，并用管理员账号和初始密码登录 2. 点击界面的右上角的头像按钮进入管理员界面 - - ![管理员入口](http://manual-cn.seafile.com/images/system-admin-entrance.png) + ![管理员入口](./images/system-admin-entrance.png) 3. 进入设置页面填写正确的服务器对外的 SERVICE_URL 和 FILE_SERVER_ROOT，比如 - ``` - SERVICE_URL: http://www.myseafile.com - FILE_SERVER_ROOT: 'http://www.myseafile.com/seafhttp' + SERVICE_URL: http://www.your-domain.com + FILE_SERVER_ROOT: http://www.your-domain.com/seafhttp ``` 现在您可以退出管理员界面，并进行基本的测试。关于服务器的配置选项介绍和日常运维可以参考 https://cloud.seafile.com/published/seafile-manual-cn/config/README.md + ### 如果安装脚本出错 如果安装脚本出错，您需要重置虚拟机到干净的镜像。 + ### 启动关闭服务 自动安装脚本会在系统中安装开机自动启动脚本。您也可以使用该脚本来关闭/启动 Seafile 服务，命令如下： -Ubuntu 16.04/18.04: ``` service seafile-server stop service seafile-server start ``` - -CentOS 7/8: -``` -systemctl stop seafile -systemctl stop seahub - -systemctl start seafile -systemctl start seahub -``` - -## 其他高级配置 - -### 备份 mysql - -* 拷贝 `db-backup` 目录到 `/opt/seafile` -* 修改 `db-backup/db_backup.sh` 中的 `USER` `PASSWD` -* 执行 `crontab -e` 并添加内容 `0 1 * * * /opt/seafile/db-backup/db_backup.sh` (每天凌晨1：00进行备份) - -### 配置邮件发送 - -参考 https://cloud.seafile.com/published/seafile-manual-cn/config/sending_email.md - -## 升级和其他问题 - -### 版本升级 - -* 关闭 seafile-server 相关服务 -* 切换为 seafile 用户 -* 下载高版本的安装包到 /opt/seafile 目录，并解压 -* 进入安装包下的 upgrade 目录，执行相关的升级脚本，具体可参考 https://download.seafile.com/published/seafile-manual/upgrade/upgrade.md -* 启动 seafile-server 相关服务 - -### 迁移社区版到专业版 - -* 关闭 seafile-server 相关服务 -* 切换为 seafile 用户 -* 下载专业版安装包到 /opt/seafile 目录，并解压 -* 进入解压好的安装包目录，执行 ./pro/pro.py setup --migrate，具体可参考 https://cloud.seafile.com/published/seafile-manual-cn/deploy_pro/migrate_from_seafile_community_server.md -* 启动 seafile-server 相关服务 diff --git a/db-backup/db-list.txt b/db-backup/db-list.txt deleted file mode 100644 index c462d2e..0000000 --- a/db-backup/db-list.txt +++ /dev/null @@ -1,3 +0,0 @@ -ccnet_db -seafile_db -seahub_db diff --git a/db-backup/db_backup.sh b/db-backup/db_backup.sh deleted file mode 100755 index 781c3e3..0000000 --- a/db-backup/db_backup.sh +++ /dev/null @@ -1,20 +0,0 @@ -#!/bin/bash - -USER=root -PASSWD=aeneinoi -DATE=`date +%Y%m%d%H%M` -IGN_TAB="" - -for ign_tab in `cat table-ignore.txt`; -do - IGN_TAB=${IGN_TAB}" --ignore-table=${ign_tab}" -done - -for DATABASE in `cat db-list.txt`; -do - mysqldump -u${USER} -p${PASSWD} --opt $DATABASE ${IGN_TAB} > $DATABASE-$DATE.sql -done - -# Compress and clean -tar czvf mysql-back-$DATE.tar.gz *.sql -rm -rf *.sql diff --git a/db-backup/table-ignore.txt b/db-backup/table-ignore.txt deleted file mode 100644 index 5826371..0000000 --- a/db-backup/table-ignore.txt +++ /dev/null @@ -1,11 +0,0 @@ -seahub_db.avatar_uploaded -seahub_db.avatar_avatar -seahub_db.avatar_groupavatar -seahub_db.Event -seahub_db.FileAudit -seahub_db.FileUpdate -seahub_db.PermAudit -seahub_db.UserEvent -seahub_db.UserTrafficStat -seahub_db.VirusFile -seahub_db.VirusScanRecord diff --git a/images/system-admin-entrance.png b/images/system-admin-entrance.png new file mode 100644 index 0000000000000000000000000000000000000000..4e2d88867e5059ccab2e5f9908e138b9a6bc8d38 GIT binary patch literal 26967 zcmY)V1ymeQ(C`amL4pShzIY(Gv$#WWcL-r|UEB%o7TgK$?i$?P-QC^c?*Dn-@BQxG zbLO0x-kz44?&_*vb%!d-OQL=z_zVRFg(@v2rVIrIO$fP25#b>z;I>~}P*5n+=AxpC z(xRdOMSEKlb1P#gD5=l{4FpY2$IWoa{CL@A{9(CN~63~e~*V!y~3xGz5oT}@2|5~2gA39t*Y|q~u_R~M&N84TC zp)#~HRa1kHVPcqQW2nS}YN!kHYo*qppt-Z5B$@vVB*`pYU9mt7PrhYc?*r?C?EA!r z?#^C)aQJ-{#}S}HgSk}z2M3~Uq)=_~ObIwpLbrkLCn=wlsWMTjeNm_pt5rj5=bBVQ z+2)#l7{|r`^L5380ue;hjKB-Eemd3)e6iS7KyQq%{-lUvx|ug-RpVl_o@#$#2s zTn>ej-&s(%^`%X$h*dOgUy#?3ZVv$TFs!(`&sie^fxV<#RH@$2Qt~=Xv zPn+TZcsrr5KcPPnrThdALT}%%@9RIx@MA%{3c=U-VlaY(o?TDIq%9(+2jecML zq7!k}BX2ZNUAstDhF?{ctBLFk&0E&nQ+gO{frBb8qqrA`?AE){yJP-~j+fTO+U^Ye zR+RZ21DAFq`Zt>%P=P7Qg!^qHzzG$8~5xzWC@Mu*e zE}N(@LWqb6J3>TKFy=q$PHPY=O!1SE_J0Rvqp1GI`N>cOpY{*83icJ{-p|AikqDvF z_h$1;6a4wVxf#?WRk89Z7q=V@4(c}Ax9mSSJ1r?)J%7BGS$A{(=Q@=G?{@KW_(Wc?*nwzz%oqB zz>gc8GOUxn^&PQv-&#AoCcoTEPIx0X>yeqn&6|(rk5!@1^EpDBcnX{hXF+Dw9GkrainoTvY zovoH%FL@F%4_p4g?v;uaDVip$GMPBlFcURpGo?Ru}6UyHx0)RH%`ZV_7&dwRbc=Q$EFCAle}DAdaA5RNj=YGf_jv`z%Rp53H4Jf)UJwT_j{g)gZB* zkP(V?f=KqyEMEu`2+ufMOm4f9jfrg1E!(D>mL4;aY_>tHU7&&?i8vMNb_!Gp_=w$T zdeUZ>U2B!u*&+5W$A%-^8RUXDlYNs|6Xn`F6Pi)?v6OwXeV%>G(dgs{O=fyO`d(a1 z`Y7$!E>=*rmRlL!ytH~&ez9?Uez$$CaqHgigm$$Wwa_`6Qjd96OM?^o6OMW7c`r^} z&K>LhMfSzjhWy3n@;z0`x2xx1*ejur04FOBMrN$2wCo(}{Mr6i8gh|y0Z z3?xi^8T^5ng#5PdEN%TB4A&Mn&%0+k3^z8n=U3HNLzl&O&0Ch6gcq%|4-uqYOtZEf z8)Tgi@9XcM-aXzvKHDJ;qAucJI+nd@ZY`D@wZfFcxcR2R^7?BE;|mMIJHhL~-}s&Q zkp^i7BZ@Qx@)`2hI4rg8vjKQ*|2}*ao`!~uBsZWx~{snd%N7dJidIvRL5Mx zM8))q)sL;Eh!)4p$;nlhSldhmKdrjkY;b3R9R@NY3dCt7G$aKhz+tg{by1Q7(S)7u zuWOnsn$lJdL?Ju<lM|rpLx7J5*aosfK8MFLLmi9}# zCn~3f*m69)b0CZL*`684f~$hF5dbL9Y1%Mr9Q>W6U~SCBLyH9sm{ z9h$RWbptKMjr#`jU-J*V?Oy&K2X`53jVvd5Fl{vXHHp-0KM!vv@Twn`)9KIEyT2Y6 zaFlWES?X72G~8R|o9-1j%{qlSWvH>JF`QV>S89G#YpZ&dQ`ecel$)RZS#BhRBV@Ei zSz2rwvQp_QKo<=2X=~=OcTmaD)7!({PV8ogZY;3ke~Y_NxLc8JP_ufe)2nHBknE0% zyA!y(kYNjmY!eP}qlSzBn@ zaP~Qa?)SZ>&NEk6F{mwSuB9r^-`Q;Pw=Rb+NAMT{aL>CP+??9Z zeH+LdaE~@6y|74|cRuLt#nMoa=U(!rd!9|%Aou14r+Pgfru<_I9)Hf_cO8Gwy>Yv^ zk;7|aBzjysd4N4zKa<1rVr1o;d^`ynK9qIuY6E?KsD) z!SiQI>R|P*f2%(@X?TBpf3dyZKxt#}F@3ce@Yr}L6wLE>Wo5phI5L`}8Bi$C$`#xo z9wjA;zXtKmsYCh0jt#?X?m0spnnN)&cD?mb-tj08Ko zUG^RqYQUsuBIyTNcWqa6<`2gdtvV=Ast@=O4Da(qQ;-kDw?ML!(sF=;!lnA}f|gdM zyo9(NTIQ;nj+%0^KqFggMnjP8FJnemYdc78C@4NxAmrBC*wGN+YHelX0CeRi|DPN{ z$o+rGOyq$7$>M0qPp&Da2oSZkHwJJpvNJN13w#Cu0DSf!6QHt~#Q%96^2ASW=ICe# zWMXo0aba{}W3;t5Wn$ss;bCHCWnyJzfaG9saI z+u8vBE7$Ost&<}^Ir)DT{omjJw$stvnek zgaFEN04Y9o#Uryb+oH-!JYK3#3RlpPrC3qY zwXQy$lbms3zhwIxKJoZeW@l-Fkkrv$5<7KMneg@)cdu{6s~JwD-(jC8mbJ?&6%n?P z!2IeG@dR&oE1Lt7ZVc2V;e9Fkog`AJ-Ug;rTGvku^=*B|WP2w}6$*&x~ zY9O=hj1mE&o^aWW(Les(hW6!#S>+>Waf*BQ@{nn?xq~@!gzxa>CjV3HLRn)vVY5_g z8hyIfDk<%h)lWM`hvYQVz{Sok^>EI=ifi=i;%h%T3zxTIFcF#|c`_=gSnW52p#ju+I_! zafZkPW%yEX(~H$ctuGv0Tq7M`9(uZEQfY zCjr1&0Dr4XlHOP=#fKVUX#e@Zd^6AePMD=m8U+P`l<`hKYK_wgHPvUrA6u1Oh3-PZ zN*;Q?=iD&=v^d1H`CY6wsK;8JrHyue;xqsJDUivBz=j_sQj1e5 zI|oNIP^t0|54CHuPtjsByQ|{On@0_H8orCX#@s(Mh66Ckf^nHr5y_FmCc^qCxj*iu zmB^q&$Ln%F*>uk8`DmBIYFvUsv{)42&y*J#xL1RR2o+9EPVma%&77i?D^XlOeMr;1 zb9b^ZlFDHjCN+r&zS&1*?5GASDs}jSW289QsR^)fOECJ(tx(kBIBw?bllca&_^4;* z8I0?a&Ku?#b|*MtbagOL6T3yx`2izIObI0X?uU1{Pg03Y2K$JIsJ7fX{ZYheq~mq< zb9T76qx)lN>Ec*41h+-p39x<^KpYCOI$l`E;RAWiny7Z#zU);Xy_uqQF5hA(A1neAu%>+N^>oZ;nWm$;ab@sc76>q>5bYT=Aa;s9vb z@?@|;i`d-Zpp$N;!PaH(bPl}Maz|*~(?3?TIY(7fZ=RMK-3khR|2d~@_!5!6I>8dO5=A^+YN{al?PXS$khMvPnna-gs3B;{S?I(2I*G>g1nKNMR)3^9 zG)anPavwYOR?5M_@MCo@sOih@4bxcMPPBkBr}fhDF^_pSw~M5`-y?549>B%vINqc@FDkS7%sugRp$iiS;lptMm=5TzpTYhfzfh{P!%LTj zgw-`Wf|N`9+-Dc8$6P<67C4vE?tZU$poLy;wflUul-v3zh>`qwPQ`t8A$CLw~!#4x9yXPp-2%$aJ1Pv5y|U z4-HrKIvt)O*!jJ`tWfi#L|vUS`R7J6=e#9P>sriMSzeCSncZZSYA_YksNN<4w@!J` zUyDF?v{M?UF`aKcL1_GK|YhP-J>sEpzJ3fCWc|6239C5yU7Q$Kn9!rmF2v3 zyap~KSbex+pWlLtg9j%2hDonld)#}Cmi4rX%zkxhCPR%)@{OI)>Cxdhbf8Eai~qtm z@b>u2-Svb4y=k%MLr{18Mh?};-dz6oy)n~KM|V6X11c4o$RuCb=ObzD9YpZ#`oPtOi2GmPmFZJSJ*)hQVGsFs)vrvAEM;`6TzD#gCkLtpn3&gyVCeXC zITx;3nwm&pp7>_qoc%p?kR~XD(NBmfwFnI!XvHJvT&`AFp0B#A(N(ils4^AXXZuFQ zICh5;Yqj2{g~m&NT}>eUbt)#<+;$Z^Kcojl;UZ2MY_m;qLf71<`SY<_8!MeHu%A`e z{qd^MxarHF^fAIxg*Q>y$zPB!PqXMiK3f6FR(d-&yMD&N&OpQ;4$FlR3I)C$0uEu~ z#>zuQ(-dGRSvUoCgp<+4jJ$w+A=*pxGx*o#&L%q0>Js2~+?=$FT9|d(-x0HX%yBY@ zkQL)$u?0V-SB6$P)tiQ)l4N%46MutkA!>Y|E6X-+X7WJ}etV)^5Z+=8xyVwW0 zhVY+h@D2UOK~5T+UaHcl4d&8M+>+uPL`7#e4_Do^JWIy zN+@0%34X(N;e~?;C}xf=UVb%g2@R-nE6&_OphM9EQ}yF$AMeE{@xv;Jl1UuXX&j=f z|M_*h?P*kHuIBKFU?op}dyb$JJcFxMk{1|_(1}jjS2o|Kk<>yqj$fF0C>8PpQ z(oYG$JEPcKf&V3kUWs(nEJHb~B5!AOcvXuc8nqpOd2PEuhI_%V^|f;{lfMjA zxv=_urQM_QISOs;hBN^R{pc(l>a8Df;6$|e^ImGM=mDc};~g)knzh2b;7=|YqJ3he zX2mt;0&C|FUqVKw-Qd8Tvaju-7c!A+Pf}^XI z$-?hy`I%^bjJZQBT#aUu1B`qrPH-I8DjXWQ(VttYcp85OTSLoOW6{L@qsN{f|52|h zu{Zye{FG+d8n=V)mfT0+^l0d&wM}c}|7<1Cf24^P4s(Y>22f;x(LC0?AiQ&5t_as1 zJHYIWDl?j2;Nm9z>>WiW8Z@ZiezdhKhf^n*9c_rb(Dd|k8)!Ay^J1>4xF}<4h5ti~ zcnW&y=ho>Y?X7i-delKnQR^L-0nN3hSj?BMWhox77YUo_dP@ynKYZupFLI*jg&Vt` zdUL0eJJ<}!^0hWRu9HHhV7?pyBHTl3rI8@RIZKC(lpo3fm7TZxDaiNpiy&}IMwz3U zJ#kb&M%2@7w7X(OShjT3oE7BS&Dm&Wwg1Et;PHBNuvhihe>a`0Lp{@L3#a+ugCtQ! zo?ANzrCT=_iO2B%b1Nk_%oP@^|m0!~;fe8+(~Vdgt%1OE!yD`n*QF zD0`_I5+RI|G|_Yaj5R7jGxX?!ui3JheB!*F&venr@r%teb6r~3+MId92f+XUf`$nr z7G<|Ai@ae-fpYLbQmv0>9f8|gi<5j|>=(MBXwlSrs&dsJyXV`Z?-UXd&iz6zR2;{O z#jDEJlpWAAz5|%a#$lJLGqPG7Ln$bL@oZaFj}SRvYp;ujzx1T<;#5wwaSJ6 z2S z@7|SZOZa#ng7LX5nnu_(r4a-%pbesZVC)w{bZlX{;bd%)zsV~-#!17SreJ7BV*w4w;w9O5g z`dxH}h`!?!4TTkgH^wnLU#HFGvS%L7*CaP2Yv+!HN!e;NS#u?$o$00&_&Sxl6ht#y z{$y?8i1o8vDY;GgEh)EXCYJ_^cPfjh^)DR3CL(;LL!E?Y8EZGTj4KuMxohr)6(D%! zm9FKJdrtopwdFgU!|hEL&HarX<4sc{UOeO+yN(K|)QhjFsf&Sq9WbVo%5EU~z9@c7 zO5$TTWB((7%+VTdv}Q~EeQeCb$?I#lK&e4MBBjiMZmmiEs>?Xu|Siv;EA4Xo~{6v5DsU*5Q~LF}GfuZSQA)JZS-OyB5qhRxbI z3-etzfV2^*DTl9pP8&mEO);6J`(sM_2=+T1oH9xt3jK$B9e0ChFbTCJsaILs^D#{Q zm;S+`^nBkoy~YmDWiLm&HBsg^Q}`ONm!y}-d##LlC3qLroZeRUhYurFk5y;xh>u(i1mMWlhOg_F{*H^d2`UuH%|T}cL)}16 zvDVpchzsve!EKUz2y0&HG#I!bZMB?tGI?7NVPKZ+ZS6Zra`x?$;NbTR{ zlAo{0fth+%>IT%7fmLR9+B=1Yk>iHJk#@VEkm^l&x2@4YSdx@PrXZ$p^bUazPeXpi2b+HmByBf@{omQ%4S z>Pcx)6NnBY1{)Fe$;s)guDk+J{9?lhIG^tS1VdGCX8D?FwnVCJ`$Ya{&2S3&{@D4c1p*iUc;QAEj?Wq=CSY<+7gq-mSAttcso#L&?# z)+^5NH9U(Na^IK$lkji=9B+&eE$;EMp}vC?{A@C$$wJ)QhjQg zq5XbYHeh1IG;cj8$s(sBQK9T`3aF`g&wJ?qLkAj8z(Iy9b|Qcs5kfIvZ3mF&%}XUxd!EyqbkoUqY(wZuHkAgykei%Yfrtr7a)Bn zlM3V7E%gyu6h=~L(pF&_pH8VLB)1SF?W3D?G^q|rc%#uUxu$2^>9_jHf+oHrX|Q+O z(Pg8zTd#wa`)P8y0qIJ#Z7hYR_Y83#?gs~cc;rZ`&9s+RTrKy<;ypt&@k>p^MUo|W zur{lXL3t-KZ*YiSyjiO!g4FW03{+ zFe)M(oOa;vc5gofX5L?ROcTc;ILJ<)A*m&zzr{WIa{j$oG}x>i>qnqn5tSe?%FF>r zB@#radm+R5_iqLEHb6MnbGd%~GA3$(sJkSRuN81O1@R6MF;DDYND$MnYeF9TyqCMF zi@K{{4)keJV%)w~%9)!05{yGc#7D87OY_wx@Odc`1`25nVfF_2#4JFiu#)JM+gY7( z{Ffvv-pXVIgwHABz_jJtjwCXSE3i4AF7iz!Q}sk(Z$J+O_i*Kg41ibXQ%V|kC)k(1 zc40T97s_{KsOi}W7g>`36oXyr4eiJHtMC}mgMr-5QdoV5AIH>qhtz*>t;1-*$50D` z)x3ul;C$J|7b>;#0MttHh zV|4Bw$MI`(RbbsK_xH+a&N$Fc9EzCeKe0M5SWF=lyA_Fa>89Vrd_o2PUZ>@vnC^V%$t3cT}j<*788Zi>&r)P?|){w<7o_ZDhjI2ou%SGTP z_LYgFi4$qMiII!Ou`?BU`duf?EK7|#9W&$s>Li7c`o6iTaw~Dud@LF*M8&*yKH}w=R3oU1rvFZyewMkhx4h5upfn;71t;*tmG@E!#SYNBfjZ zECAqC0Qkd}s9T_mJuS5KLsVl76hR_TIvlbaAau}I58Kp_@<4dOfAQ01D9(v=lV%vm z0Rg;ru6ffEKIGVYZ0cr}wvZOL!<}WYbN!NkEHB_!fOiye!kZ1#fhM@d9LBEpdXm&5 z&_yG!vN^3=t>2~JJh*p5sGqpB(sKPHf8f?_X|{zeGM?$C@X2$FrKJUawL)p!`i1L-Ad)OPJJ=cAlUS?5(1PW z+P!JWu-9R-GIt+sbas00wEC2$t}iZrW9odZ@g{H$Mww;e%%dtD{ez0SH+Eh1-2j0y z&)TyT13d)>Cittb1p`uNY9fsjso`J}+waS}pHrt((NO0DHPb#yzowfenfR9{D3=tS z`g5eagyeo8gQ0yZqJ%7;B}Y1Nn^^&jTwhcwii2!er8(IJEX-K8>fi?}ysrZ95#Z>^ zFfKH}Cq)D~eN zO@46GZy^maKwM9ezgrFnkVi%qmnw z5V0?|?o9Jw0WR_KLYEQ7$$Ys(B1&&J0W1ZY2kuCaW}>{eH{bFE1vdRf6v^+KOv#~V z9Nc4446{!#8N)TzQ5&C$baAuH=F7BpLf|v*=@C`VU+zM+NW6ROx3n;)$8rqK`s~7l zNNx@Hs`xxdlUZz%_mZ~Yda`~C;R$D}#LDUL*2K;o&y^BS2@&=FP5Sxl#)XKB+(U~@ zzolPqp?13}-Pr9R3Lt*vlSyKnK{)K+lO7zdd4)*(@Dvf-UB=YbJn$a>?`0K!C-+ng zF+R!TE|PYZnN-hkm%I64MNj_Q6iOn4K!Ba|`6?MCaxl@^7Q#mc2Uim%bXBu_U4Enr zn$foGqEF1=bpeL=7gR?6o(zu;N};AF@N4G{_S${CikRON_RpYqv$`TP$3Po53ZaLD z7)^x%k^W68v5~Q&saVn^6twAGF`oxI81J8iIl29o9vBEE=~IJ$GX=8?3SJS3a>t+w zq+`IqXo*05=che1)+5i)cPu1NJ0?N+4&NoTI$t+7M)E|dOph<;Hn6ijuy-x`BL-jP z2+~p@GR&MdS4NnXeZP2#gW1KWrRBQ%wKrN#E=>v9a5jgzOy8RAc{Pr`dQJn57Ju0V z35Z-#sr6ESX2eEKSbgaVQZ>KLixn3{hD!NMu1P$7SR^q|x~xWF%bHl(er&uKV0|E* zy==2kJXpYyh+5d@=5qV!ds9ytAyf{V%FzvOV_RlnJ*9~IYCpxDt3xIqvqXa*kfe^=MRY2K81zimYW&%X0CaB z7A^Y1E_YCSkn?REm~9=Y`HnVh=Q0{X+^>`Wzsb`Ah3tEs7)}SAov!s>bj$` zR(Jf@cB7I=n)G;%2%kc#;R;5->efWUnOBg zhM)ttEV15lp#?1jM~tS9H0+TR9c09&zIUutJi6O9MW5{CUFwhNM;zyp^{2PZ?IxXI zw;1aPu7N0xT>BQn2*7k2u@_fViQL(~mxvKszY7R|}3SBC6{@1GUbdDkL z0Lk}(<7jvAbXM9;I$tjCSUjzYeU={a-fWqEyTnP`Dk{bSAD5)bIA5Qa^i}l$NfOR? zjloeB`PieGLZf{tbgHjX!Or7Zf(C^zFN4TT9hXZobtWSYtLtu2tt6yJG6ZJR!BDn42zetVO$K8;&`%Tz|5g zu5}S(Jd%i%b<1tOud}x$NdnG6=X?B3K?*t;O`#xtnN^!E)nH0$01f@(x$4E*v-R=# z!FgEsBB=L{`4m0jqZDeH4{_ao@mvp57-xJjuC4gsc|Oct>+aVBj`D5=VC^=nbneaL zy^gj0xmo9q=g>}RX1uxwy;TJNcFrgf6-^EAuqZ#HH_H&zM=as$OLlEpO!}#r4I{%I)XA*6&q=(q?%BL2R#e$7Tdsg0v)FdNCLem=rQe(V z9sqr7@-KcEb6LraQ;z=1rjK_)xNhZxPz9%s+@6t*cLC;n0quf06ty>iZ`}xmC)%*Kv6<)1# zf_Lj$rbl*`5m+a=J;g5VFCs}cPu&eCfEY3M`DbOWCvIVmx_f^$^~tXFX=Wh$xHhn1 z?6@wU#L*KGLC+HszQ-IkZ0gP+lF3W`o$iH*(!HgIbKWIOLG(&Y;ClOa`6tay$IE$A zW82=?aasxm)?5od%dY^6x=el#TIh?ov*vn{!#zD9Q1~Kja~x}{&!xfrvzYP)KWo?I zH*XemT)cnDRSE`y!w-HXR1!(FuSfBScCg0EzLsnBw-y!Q@aMBy$n((Ka6dCxtvvt) zK*7W>Ktv4GJQj$#+Xj@OAV*qt1==2qqHTm65{fNJ2D!5l$q>$$R+^0ln6s)8|66IW zPU7{sW`k_sww>aFLHom|@6w{{vX->BpJr=6emo+0Pn&X=$kjrgoU+_(Y1%Qq*{HE% z`d2y>sfL{IV_4aANok^Ku2m~z6XA9TMCQm3=lMPGBsr^g*#219APNTG<^CB&!}m1X1h2r}>Vep{PF&ye_qkq+5XtM=+vs?CAd zVVRijd3-Vp_GnGNduGdBA{%?z8WG$@Jbgu8XZ*M`Fi2AH-o55ix>p`Cy)9C5t1(xF zp!SA^?mP*8*NEUIZBMNRs*z zhrTuP3A^ZcRVC-h-vl-v)N##%H2f0CvYb1YknBl_5s9c8x|BBS#Bsopt%?q)(x3^tk>6WDvP?+u*n!<6ERL5%)x*Q_aN z(h%I|?x-8$d&llAH16%)cBYeR9Xg;iVuXf)hl}tGS>a@|y(O#~7?MofboX_=SD2Da zTI3+K=06*+2;R4wp`74Ip57<}=L9~-kb@c2V~6^so4{~BthIfJy31D$bYh(h6KrM2 zmupm4p;G-R4n%3mmGsDL?7dS=tUX0`b!Th^&I z(9U%|R0}_dY;=`n^e6HWMljJ+l`eobB#74W-kLi|9Cj*ZV)&azbPO)WVFV&5*-9Dh zYbm#f1d)|i4-C)GwMA_bia*LdNY|KF;W#}&;#c+io9U>^o%Bm~Fol!d- z+lN6YyqAu`v)eF3Hmk!6G}A9P-qNK_#vLw!ca&0_${o^6kMCF&WfD{2gU|gFFyw1S z^m$96P$b(JkA9_XG&Ztc;>EcY;`)9585!n9^Z5h0R*h43xe$2^fIkSaYO>J6VevVa z!Y8IM=?N4O|CUn3Xw^vbfiV;#B{Vp(S#$mgk478O6M3KN073qw!R4Q(5er7PdpH4; zv=~xL3#^iyoQ~4R|D?gz{Kbd2(*8!TOz-aTuJ|@Zg?uw4ccDo*QLr#t!T<-5!?)je z(mgaJos8aX6ut3f7bl-zpnbXPH>WFTTXersB8)=3)URs2z_Y>SQl5YiT z#OK~=c|1i$$XLMj9k*Fhwa3s1SBXLXUn~%sl!ufOApUBMV`B4Ft%0Lij5OJPclU&q zM=;7Oe8ScN`EJ|(y?W>w+@O%k>xN`HJfR`Z!f z?~n8Cf!iHs)%lGnwN?>w)jz+Y!3tRlgew#LiTU!M+a>aEePnl9rU~}P-dLIc;^Mrm zrgC}~$vrFtS=}N|R+iZ=&6^+5omfqa;@ZPOkWabrzb9c8Z5HW0(0q-wg{&PK&EGHE zFfi7VfN~$|;$Fz`<^W>IOdp{@97O*Rp&yns4j?16?VRcz;a)Cmoc|yhny+lE9F?D; zGu?k%4mUReip7Hcma)afwn6f*k72%EwL`Ws)b&6pU8>76&+nkD`JS;(9kFiC;>-{& zx4fj!=a#6ci*m-Y0*r)}Dt!Dz2yn{~JEEQauW#ii5bfmA{RzU>{UP$eQ+7Vyh!Qp1b;8z&&nv07>2P1~g^ zw6K+3uF*CmH`=)+TXXj2yMHkzqx(+F8^qd*3KbId%2?;PBc);T*>-T^Fg^7JwgZ}| z0j#z~A}vpfWo~Z#JWI+zPac|`uy5ZWgDlm%@eB%&Q1fiHS*9~!s4Nt-E7srjFH4+f+jvfgi{8%^jVJTL;;qLeVb1!*SrIgCv|6VqM0 zkr-2LrM!018b=`J@@|K_wCQe?+#12{39=5SZEP$>&#Pzfc(_Z=4>zi`0$199UiuY+sjrUVH49}YD41+w4Q@6dD*&#KafoH7j zS3v<=4y9&xVoWU<;w(->7Bma12u(K0UxTv?aUFWs8>~)0Nif{if^C2PbWPUdf*?r?nG9n3A%N&*idl z$SYBiLIs|jLPLQA;wCE%-IgxHLvhqY!GfO6wW^nWLd@|!edtK5Pdiz|$P=A0G=xER zK2Ik`*MSpW^Lnp*Y}Z>pZ$+MOoi?#7MiSqf%i?t2Pb{Y)NN;feMey-2y?&i$fqWWW zrX}i^e{PUzJ`bgk~TVtD~4>BHOJY>J?h)c&6)l-k2PrOXL zs=!Bcsh(F6Tdz}3q`};HXMb$u+}veR1BLcWmglwY^?EpC!i3lU=jKz`Bp~u`zdQ|~>+es08yQaHf6;n+k@?VixBqBowK-k%V2owQqgzfmNLTD}<}W5h#m9@zbPA0OJ((w({`(DG^Rr8Y=O`~Oy>D}*%4a*2 zrU}jF%5i!sR{|&#FmWrQC@Gu%4dUsIZ9ss!F{~D5rq9-==Hub-p#BK_>)V+Lsm}K| z&~ZHN^~%RnhHM5YLx@X!81psjCs;_|SgN5PT2yJXzUDh>PNt7_xNIpA3PQ zFPA)L-}53amk#o&`cgEN#D9JpdG`asK5+uXCBh_k3tzyt>i8pvC+xAl>$3 zzEO{0x9g&rhiR~W!BbxzcqR5AcUQUU8n^2GLTo?g<4u+o-6j#@V37Gej)r)PnOYz~ zG(rf3t)UkR(Th*NPhoC#Qn3#TY0g&k9CE!UUY41B#5+6&tXY5cBA%gO{<(XWvla0i zl+Z%Kf8V1ZRT133 zs5}}%Zw}YiiorgY=yEC}p=}9%n5dLPJx)H4Yn6LboqTi(?`O6QHRp4{*Q`#I-F0qZW2+RxCQrDe5;}b-??+b%LtaY5n9oH^u5#=cA_Hgjyu&8 z&>1AmSpcQ%_hX_Aq^ub-(UxmH{5_wCCk79vavBSn9 zymBhDp`YioN|vMfYqfk*^rbU>Bz|_M$3-AxzBJ^hn!<}2*UG#0gTuI6>5AlKev(1r z#@oGy{mFtY_=z4J;jyHm^&K996RNdA6N4ucd^1C<9v4~v`SqXf_{&|aPs%$)%CcKO zTpKBt)JoNd7dpVLtIzdm85~m0hsH9CZEm&n1|1^nPf;#SM%!bl*CQ^W&4T&cUMW>R zml%-A`IWuCBL=NVw5ig$M24w(@d?HG!lt0HW&82vz4L>Y%dz@;$-axN*UZMod8Hl5 z*2f|W-{4qaV-btd)YJLl<#X}+)pC|xvj$Y`crmrMcLq5tPzzI)S>`Ymds-3o>8`$V zXt2~Vxi98|kt&qsn6d#V;vA5%3{Rh! zQkYKP`84*y4N)t<0{QM2v4EiG99@sMBpeM&3c|aOHJ8pZ^^f_my^#dPhQX4AQc%B= zN`}toJnVolk$;Tlj@#kQ>!~X=Z z$V^w91%}o>kV2+)!=HvMW>;>d6czqa;=yKCM2A6KC%24mdxSQQXof^x5J(=jdOMev zfDMn-Q*=kjS%SrpdgkCwd{)(1QqQItjH09V-az`QTk*JneoWjleiV3Ug(${*7#9Oj zpL#mTq7ilc%Hcly%~X8vB+&>FxcrPtxZ8(k5U*l7?x?P$UjR9+%{9#KcXvvcUy)y&F*)pYwn(@QXUO1&t5E4q5b6G+Eaf-)9Qj@SVToDmw zltOlX@HSrOd+KBIrZRYZJy>0{UtMGYT0Q@vD3nX%94f46Qtr46{D?6GdbK-Q#(CZ} ztjsRt;{JgLj+bd2w2}@Cx-1l*RC+!E(QbTeu8F02`R+7}U0yQz-G5Z-x9cv?m+NHk z5wF?a{5o4i(E)TpHkdcHdAoPSEJh7g)q4&10sTRTo1=+(cPXWNMx@QUj4g+6Zm5`4 z`{)@|!f)=SABV6XcA*dj=i=zvq}buUgG$#sNpGJV*Ap^lj}98v>uD&kwh7-rsn|+y z%O1aQX*+|#yNJWU#B2ZXIzRZ*F4*XKM}6`CG;);>O}%el5M%<<9Woju1*Gdshk(*O zkd|(cZUpI;mR8Eq4bmW>bPwqsjE=!`_WKK-cYCw@Yojg|oix^iw;ZbU9s|IAqv9F2aUnZGyDJjdR<}rSIioW!Al*yOuu*%@R zU8+fcPOkwzW-zZ7<-uF1$g*?wv%IFJl-((goB*Qh^!J_yuw1G`szX2^25J1 zzHvljqBaJEJ54>q+ShdfcU}gaA4*ad3v?&_VBVkow{Gn{SdQgx>TioW0|t)}&pe49 z5gA=>o#jOdk^=@flCNdo>Fb9Jb?i9^dE5^M-6np~W4%?$Z4G?LVomkwDORT)z%TFG zE^`vZMj%f$g1GbVr^|9NWdq&E`8}3eEXuy<*|W00>wM6QYe`(9e~IgmO@^;U-nh&{ zGK&6-kSXHMRfoVT-l4Lmq1ELJhWsdovYpuUnf*LnsdB#@olQvbT$RguJp9r-o2nO9BH!f=5t9te@jRFtc6>zg zi)bS0B-~}6Mt-P~xX>1nk3#b>JU(1T^0c2w$g>iMes~X-jWVcXSU1;wjuT#SH5-}Y zxk!i3EbW$o?3L$xOU|^e`e|yxIaP?m*Fh^vh-vskyTnIV{n|6Me_4<%-m1}#pxYGn zJ-XvQpMV3p2bYWwe^i%d)E<1UG%RzgH5R}1R(Hf)4N4(+_Bo}d8lEm6Ew9z|;P>$+ zn_0Dl-Mju9(NIYkG+3>z!b3aomY?+X;)&t%eOJcX;F7Kq(9?}K4oZJYt! zY;`^J{2xpy91iWh=Hu$GvXMBR6RQ%fomS0^=$yee))Qo+tUp4YPe)ZO%-Nc3|IR9U z$Zio;^J}N^oKE7-m3Ln*^xMA2)@Syx&FPx`>BZLbHcMRjjE4E~D(I?3-CJRN!LIBx z-jHGDlE>Ic1;2(ak?;~>a!DI~B$4*W0XXQY3>q2r!zV&2)t+_%#+n_Jqsw}u25*40 znsOCb=)sSZ04L1Wn?yd53~E5gAHCl1;_un z^7r-ZoTDAr27_Du`St83*J?a6HeF!x*#h(=q5CI~1whau36-c6`X?YIh5&D4rXSk& zT=%2N$ay`v8_l6lpwvosB}<@0Sop?W0N?37JH_(*8W5SJT0K18xHj$O8|8X7JBr}&zLf?#(O#B^DedcXlZGWR|wavKvvlnd~ch#pnEcmWK@iTW+u8PD<7 z<2~sk7CrvMXoZF~i_!0CK{@^M6x3!Jv9&r6}? zLAl_jgDpsE&8AjLA|fzf1j`kzm1?dbYy=?Hd{K^~XpsjoegF+a#n zGi&(UdPuLCF(x9OtyFMQGk()G&r2>b(oq;9K`~mzhx}QL*={@E8`9(433edGc|<*K zq}X<7AwWsrCLCF%mb(J@1lJP7kd-Tr3vMza9cJxZt+K1Z(u&gH;iJS-Q)MAUz1(bf zQ&Am>E%@NWbu@K;1Q#|1Gy6Q5i5JnKdz+VWu@DUg2476D$;3H1Bkp6XROZ;nwYxtC z*b0KdyFo*7f)urOOH*AzL08ScVn{g<5U004ih74+8x>j&s0a-^#BdXu>^G0j2=BsLWI{x1x8Q5JU*^&UNPv}G z0oHn;R)EgiGpIC!#2$$c1trrI^^!@C_6r^aqSOC59Y{B;K}W zFG`+av_3)Sf?rut=ZZjI*Z3rprjY10UeLb=&QE#t6XbWY01o%q+mRcqP%Ev|*5?3s zH4TzOzAB+id8e|?nH??|UJeXfutKPG@{Cn3?T5lPCw13rUhWD0(+u;&y!WBu5a}|>tcb)z@_0NQ}4480dQt1F;vDBN{*ZX8qPuR6(W&5 zA70%2;j;?~Fb~D@1=?M&NFgdgUR>GXq?&8gzE=YLuRfjyTRu|$-xw08l`U}?=u}L&VNIs3(?R*J`&n4 zV2*D82Ea!a8(lppeU_o{ZFth)<)(3BOB^J$;FT zxta{1s(hXw+Oxm#(<18pXlYJDrpJN=B@4s$LozFAGDPm5gMb$uu!+3lKfXD0lq~~* z>xiP%?fWagl>^hAPBqV?hB<5|0oy-dgIco?WB0K)d=>+^dYI{sDS-o&HbWz69JHr7 zUW;~a@Q$kyKpZ|8vbsTRx%HFkDZy7etRB&5zs-8 zKmcWamMxPExCNzSquEE(&s7@KSw7s~{MzwTjHhAW$q(wx`LtgVpE_G@!cmqV*y^wV z?cZYmRNB`cE`=6y2sT4jmk+SFnE?bo1sR=^I8%SW)xAZwV<>@B%NALdh;h-0Rxd8BN`A3|v#?KU%L&jsu zS<{Y)nKBQ|ZvRzFOfW=%J`0cez6`}7V;;nB4fs!194bp^|MWD-%tU|C`dUWG{s`>s zTM9sbC3N%;L*a}Rh);VZ8J4TrV62JiID4ms!i3xNTx}k+&0JiL&hHfLW<}5G!-Sqv|@f<6yZhGb_GQRDr-;3Q+ zPtAd;bd6`rGzoQ}c=nHCK-quJ#CzCt&P1=?=~?V<4;Gz=t0IkS_?kWoPvF<6m!F1S zG_Y}2^{3UC%>%oO0fSGBTIYxRlYg08Xui^9;W*sQU^vA9ex2umuFzX(h2uP}z14a7 z-(yVE-ER2PjTAwEwaGC3@#&caT1X{hqR8mLK>TxV>ISf(x2OYK|A{TIuiRh(S1oV& z^RN3@bL8ET7jvTnanxG@aKC(xCm-m|ejcvYEhPbR6Z*}~f8ssgToc2ka!Er{k+SQY zzE7S|%c6P#Z~=$hLXi>lDBkE9itQHs&Uzy6sFK(^2b}ezrqht(Bjs?dMt4j|K_o8a zdTDpoGn;%myL%ZB$ion$72%+5ul@?dqOYHK-w1Y_-oB^ioV?`RW%95Ed5|9$gNqAI zVI;M0(83d?kb4^O!6!5RS8Xs->yo^nhnsun@f;DvdMr=t#^VG0FgSX6oe6mwEs-%7?Vb*Z+D*^{|vRf|< z-jDA3)*B$&hU0@>Xe<_<&_C9;erX5uau!Jj+zq7;YvoMMPrii!FEVK46CpiLuga^J zD}I|c#oz4|FKPNjrp77>yOJE~siL2Jqvx&bn?Ubnwa$!}ytR!@213KzS3eeAoJq(^IOWk9}um*>e2;83~QbtAHUCcYdfW*(=J&1>9>roxA@z}+7+pQF#{FI6hwEM z0w&*bL!2B2lTa!wd`~Sd3&{b253)Z1$ld8f>RhvK~yzQ^;-1H z#VhEBZaKC=D+rxk%($@3%fo*cV-byF{Semv{&GKM;esPW6~>ia(qd;J;G;ZTPunqk zWGcl?=2A6>wNHhm+B@`K6E-JFMF%QdIfZ|~vW1tO{q_tBF&-M)v@vA4^Z6Qbm_+(*q9pOShOZ9C4q{C2QPe3#`G3QsLqHN4E4 zsec}$#jPhF{72*Rw@vMQ@VTvc&*cKqddJ9Q(R8Rfq%rwR$<9b^?>DHMo$i+gh2AsZn-!sMSlsNNL zLCY)EiP28-Kvt*%@)zXZX78aBfA?GG3e;{!g_74RN5uthJ4~u$Mj$u6(CIuaywLSA z!Xy8z{xIm2(BQGJ2>KYF^^NC@&}4>!7aP=E!opeHfc0f;y@Kp(yqe%A4ndZcF5i@) zkB+mZ%-JdGq5*K3uncN``-zARv-LUX>voWG@(~!RmL73#st?9+T^I5F7ey6YEmJb9BEBGuAEI}t9n%m`5-2CJGc*W2@ zF87Y7VlN~-vLuVLCm{0|q9LD78GQYB5No0)t#;}}^jHMw4`p+_X&Y=t$l=1cZ z(_*Vd&4Tc2RGEs6p|WzJYB@GO?fv;#y`lgaQD6V;BjHXBKRC`H+lS`#63W#T_^|Yl z_+S3mE!f$0(;OB$eB+v~AUP=u0?~K?Z#}ONhjxBTT9~NN64N9&mN1O)g)=@=yeDXL zqwRe<9qq25N&8f$z-G$2lEwBIjZ0^a-byVs!4L_6GtWIJUG)cda9i>6#nSwl&Cj;S z#zQGZ+$>E4cgAy}pDsR%+@JKW=)ER{e6Q)0rgJ5`+`CP4Y9(+TPG+7&VU;*`RYs|v z$C$9#cb%s;Pr&@9VIMJ`nZJj0np=hMAR>TD1usTAik12qv8#O*Z#SF5j8c(s<9(6= zP5U+SKO~uU3ip&V&HQdsbMe5)=W zSvfja@FNSQ-?Tge;?`IDYFD^omj5+8 z=o1&cA^=ez(pfxwuv~L&Ck43UDh;0NGyRyWBvZ0Fod1bM;?%sFbCOC%4vNr7`Zu2>wb|tPDn#PZzS5AmNX-Fm zYee2v`(VJ_K4O$7V_-l5#jsD&0U0qoLG;co6SW1}JcsXg;ltOmbg@6`BP`8qB?Yf$ zn>uG+1eyA7k^1fyM$sglycezf^3!5KR7am6({M;yA#pGv@SO2xE(ocY1&AJZ{_v(Q zq@z%K&wj9(*Fo>M`|C-TK?3qwY^JltxlY|$7w*n$B9Vvd4Xcq<_FJ{@XxuN|M1a4x zRh*(u6zS}5cUF>N>J~_^tY`59@ zSM+%H<`a9zgkXn~y<(q!+Y0&jD29sb;>vP!Qi5=TMkKD5H=@yqe2!aomR({-gT*_} zpYPK>UJp8z4-B4MbHahA?N_Ek9&hL31)N&A$*jQS@6h!$;q!! zbpyZ+TaF1_dLN>$7MRSFor*Jy3x)BZU^5*~{bp&?fD4_L+x;K8X^0Sff9bryTf3Gs zMemXR4CBMi6Zo2UNKSP-LZzqaEG7TGPvm0|u*$+8e3q70SrUgnv*zt`X7$ICi*ZD> z3rGAc2Iornd5H!6KHr-%37n+ou4Lq7iPXYvh#nm2NxI)HN*MW_#cy&WT(QKDk+0_W zE!%O$&e;Q4ze(dm0m-9xBM38*wMU=pe^Fcf`8Qwu*NO98XsIC21Br9mQdl(HV2|5V zZTb>`OiDadVl$EFHq4wMtjHBE4?b#xA*(z6R3MTiA@{#+P5h1;;`{!DScN{N96W&s zUWwhz4@z!Ze+PHP@^tD0FyjCy$BkV=?&0|lOn{W_yiz%Le{;4qYvk++BeL-!l|cm< zJba+aHWei)+ZZ>NXI+nXT~62T0J0M90zIT@1R_%0P!J4>zsw^XpcqHBbuX&Vb#2*s zUcw{77n1rSeB1_?6hWR(zlN2K+V2+PvXZdC#*ZLPz}4R29|_&6lm z5^&wcC$64v3yq5G04-QwIIG?bDM~T`{?%~}ziiL+h*<9F*M6YdZH_8g;nfj54Z&0F z3^8ji<3(xK2$$W>$Loa0-RQ9K_&T!Kjc>8sZU+{TxG&c$iImWNBSpPeeal3n%Q)!2 zc-~MR^Je$)4s+t&3%%7V3Yy647!TqyHE?Ky78MX=s;KjH`n9dsm$gWd3`raB{>mhVB zM+f7^p#06>%vAv3GBG3~)KitA$_~v6rAH2ue*rk#m1yMD(r+Nx8;S28dj@dS8=~i~ zgS0!9)QyS1s8>&(?X)9PZr{5st{+-aM95}5DXe{h&$rO*T6Df&1xL&TH-t8vThkK# zoJbHo3!AQdNL=#W$z?@BT3td>uymxZa81@_o|JRv)Ix`%x5!qiRt{{)IYG6uCtpCa zj*5g_+wyrxu~=Z%txd9nX5-JdXE@3!ENaPZ$E~9VY(dBaNbbeSX+qGl!K=hy&8{29 ztTwvQ7WX2Yh~8xLuXow7>(V;OKhckvvEhTn-0deadoUiTq|39eyA`G$>*X0ZJuj`DC-mpU4Qezc+{-C9Ohnnx%chA%RAgnS47D2`80gR%T zf12**M&tb+!AqW^1|EnK_)498=}YEp&&Eh~A&Y@8y7|e?Z=NI(M3sa@$gE{v7uzH% zZD5&aRvNHz|GEpqbI11kd$S_Zb_JmN+eBH`R+YU`n`v5vHsj9DFx=jBjB{*4g3BmD z;=SA)&*j~!#N^$fJMW+|)&F7)7mEAI>O2_%Rh85S1s+ZZ^B!)DWCwlQ^(B(UjLvs7 zjEd4xUHCnT>Sm)8pt0deB4k1!Bh~uPPn-o49)>wx@~pl97NpSz$^y3tj@yD+=mx3v zrp(yxyaG`mtKg(G3%5qjF!W96$(cUQUZA)yyT%UL1+g08YeF0P8a>Rz24daF;c!O) z6EP+#L)oonray2!Vf_++n4(;gVr#iJniiuP!wSjq_cu8-k_>A7yS@(nCk*~WNNDRz zeH7hL*{EKkU%q(%Uo|E=+9X+GI7k+})t?0HJ`rsJ+h2kx8ax~XR7@)WNFzy0672%~ z!I!fZb9?Tk?ZQBysHC#VjbAYLp|45nsjB&kdOv0ZEeTq7rmgA)R95iq5mk!rE}HVN zvTGGuHQA?+g+=L}JkzXpJV?H$kH0GWUlb(cb+yl~t?yLmW(+UP&i#YyeQ)EjzYBaB z1e;WKoEl=;W1Ar>YjUw8fwJ_IY8o9{*$Bo&?j6>$NzCrGChvw_Q6(9{WJVn*ta9XX zB8r7oRqLuE@(g#Cv}{tibgKX9!m4_zATs0DgWaNzhF&_uST1hyDD8H+ z?@}Ea_vi3ICwR}^f!GOx`$+3rR|6~`Z#`XFXeeGmWnZsW;eW&C*>Tgg5<|=8kdlvE z(yK3;DGM+%O7p7AY(_i1RC<}^idLx^j;hm>EP7nBys1SD_apIAp90O5t{zvJR|dam z;V44-3pjke;miNN(p0CA*sPN4P?9g#Sb5UH`ft$epi+-GTUD> zv`V+ijCJg1+6=p-Wt*%oIm_P+`zupkcDEJ8ihTGd8*fW<{Bfo^cC@W_UG8}91;bVs zW58LNovBm;YlTIEH3Y>CG^%(JwLVr*=?;Ov)T5+^BcoXDg;v`u zM}nIYLO2F>m?CB0<|nEC718M@%jYTjr9K$Azf>bm&b|Gx_y)S6;XRxeb)1I$v3^ZCgWwZB|spPB*n!Gw!YEU5Tp&FNR#S%U)EjE zI*m`ug4KGJDj{)E0^9$MTc`lS_*OxfXd?Z>gin5mV8Qms^cQ!jfcMvE$kpWWUgg}* z%@NEarj|nMm~E`TWT0SIfPn|NZX?T$C()omk=8H%(Kb@cX-ofzp1*pE&P=d&oW}qV z@+UKGi7r@z_<=E(JMv>Y7NUp3Jc&y`&wa!PH`z1tQdt3?F<-2-3Zt;QW$$J#j{fU6 z*bmwklhn5=q!!_p7#2pG8+IigD2%1|9~c?N6Gf91ZJAs?AnLRDijT>?W^4M(sZR24 zJ;a!2^8-dN*3PwY^-Ry?p>UoM;4tM&kk(}7oGJ%WoU>#Hn_j;K*~c|B7KKzJ@uz=^ zB23_)GN#Z;BL||P?EZCa&alp7u~mSV%>7?= zPp$4hmz}WuVlH7S0`O6%0vd~g)gLIJBTlk?=hE%#`%Jtg2D^#(zgvQN<@ax?rXS2z zc|&@`jRhT+*Cb^IcbvISW>h-gDX&fOES-nEp4P_?^C zpyGN5K2^cR0Hf|zs?ldZFb}K&ta5Ch;m?M*F1#Mim@_k}mCwBsh1nZ*ct4YTcs1Ma zf{_=#wc+N4``-lHNvI=TsN2yTknD1X}Qr<1LleWqgfW8az& zkB6q?g-feoxdPNWXSSiVQ#wI$?~W7e+f1;Unwt8X&EN#<&7q`F#%rOjo46de5q3U@ zdEN{F2qlaH2zE0U?q4Q0P&1_gL!uJ`UEYIE!svwUL8F6}<%ZK@KyclXFy!~GL$Y;| zp&$D1{k6N5Yg>>$H((U?=**bwylilr2P)4Vz!BUKT@36a6QEVncr{KtH=)EPjP-2b&to3sZj{1E88G_3SlOeQFb0qGm)Z@*>765)bzR*dTKAgoq?loR5 zyC-l&73#rF|Gp(5++KS9Ba*95OHkWhXG^9uSejJ^?A}|Be#uqViDNed|L+w6dS@1D z7$?G2$EFn)XTPN-%defRQS6S9Mz~qy5?96nk4>FVjGt;PbzS%KEdM6%>*bsd!w6I)1i@Z}!g0xFUFG9)#CSJrtyR{cc{ z+De;qO&yyLli9{V9H0Yz5zH5w9mwn&(0fL2j=T<`C${`W_M=q$#OjYZ-kv6cUK0H0 zFX1i&@a_D_59r_-iH;Q&;$P7NL;d%{%97;Ky}H=4ni%;?U-aJ&#OIm;P;vJg$kK^I zN8e`3ExC(pYF)6H&n*PZd3~3NEwz44shm~WC0{mtcM1q-e@IboS&G7IjCZlbHcS?+ z{;K`3tErTAu3SgsvV1bYZJ(uBu!Zb&NZ}K@a0E1Y#hN#0Y4Y4mfbuDdj=9nGiV0A@ zX1_CiP-Xz9;4h(Aq5+VH*J$a03#KPZzvLiPYWw0-c=vK zi&6;tLSuylxuzQ7d!WUq=($hPZqr~*>&WUwU27-7SFl)}W{tCyH&TsRuKOPwK!e`X2(XW~aktE9T64v16q-nIArrTmX+oM}N{ z)|Vog^@s1pQ?n;3;A~xEHF{O)0$g-Xp`OqXhh2AZa-|^Er8&MU2a?P`wiX7fjJ?DQ z?T~?iH05H8;D)}`e)O3scRLBLHyJS%5%HR>qy2Q1Zc}Mml#lJ5Bj2{ZLKwKJ1pIP(pTazO``&+!xS4?iWL}My)e*CQQfRP)1hY_s1+gv2+5c=5EkmQAF9(zN8*c5s2|G!j7!o(_`l{V zmomTu{phLBQ3AL;FfMy2BjBq5JP8rqkNE91b}Zq`Bm_W{@+Zpj>T=aGW}*KF4QusA literal 0 HcmV?d00001 diff --git a/seafile-server-7.1-ubuntu-amd64-http b/seafile-7.1_ubuntu similarity index 100% rename from seafile-server-7.1-ubuntu-amd64-http rename to seafile-7.1_ubuntu diff --git a/seafile-server-8.0-ubuntu-amd64-http b/seafile-8.0_ubuntu similarity index 94% rename from seafile-server-8.0-ubuntu-amd64-http rename to seafile-8.0_ubuntu index 43e234c..16204b4 100644 --- a/seafile-server-8.0-ubuntu-amd64-http +++ b/seafile-8.0_ubuntu @@ -1,6 +1,6 @@ #!/bin/bash # -# seafile-server-installer/seafile-server-ubuntu-18-04-amd64 +# seafile-server-installer-cn/seafile-8.0_ubuntu # # Copyright 2015, Alexander Jackson # Copyright 2016, Zheng Xie @@ -38,13 +38,13 @@ fi clear cat < /etc/nginx/sites-available/seafile.conf << EOF @@ -187,7 +191,7 @@ server { access_log /var/log/nginx/seahub.access.log seafileformat; error_log /var/log/nginx/seahub.error.log; } - + location /seafhttp { rewrite ^/seafhttp(.*)$ \$1 break; proxy_pass http://127.0.0.1:8082; @@ -361,7 +365,6 @@ mkdir -p ${DEFAULT_CONF_DIR} # Configure Seafile WebDAV Server(SeafDAV) # ------------------------------------------- sed -i 's/enabled = .*/enabled = true/' ${DEFAULT_CONF_DIR}/seafdav.conf -sed -i 's/fastcgi = .*/fastcgi = true/' ${DEFAULT_CONF_DIR}/seafdav.conf sed -i 's/share_name = .*/share_name = \/seafdav/' ${DEFAULT_CONF_DIR}/seafdav.conf # ------------------------------------------- @@ -499,10 +502,8 @@ cat > ${TOPDIR}/aio_seafile-server.log< ${TOPDIR}/aio_seafile-server.log< -# -# This program is free software: you can redistribute it and/or modify -# it under the terms of the GNU Affero General Public License as published by -# the Free Software Foundation, either version 3 of the License, or -# (at your option) any later version. -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU Affero General Public License for more details. -# -# You should have received a copy of the GNU Affero General Public License -# along with this program. If not, see . -# -# - -if [[ $HOME == "" ]]; then - export HOME=/root -fi - -if [[ $SEAFILE_DEBUG != "" ]]; then - set -x -fi -set -e - -if [[ "$#" -ne 1 ]]; then - echo "You must specif Seafile version to install" - echo "Like: $0 7.1.0" - exit 1 -fi - -clear -cat < /dev/null 2>&1 ; -then - echo "Aborting because user ${SEAFILE_SERVER_USER} already exist" ; exit 1 -fi - -# ------------------------------------------- -# Setup permissive selinux -# ------------------------------------------- -# runtime -enforce=`getenforce` -if [[ "${enforce}" != "Disabled" ]]; then - setenforce 0 -fi -# permanently -sed -i 's/^SELINUX=.*/SELINUX=permissive/' /etc/selinux/config - -# ------------------------------------------- -# Setup firewall -# ------------------------------------------- -yum install firewalld -y -# https://www.optimox.de/tutorials/linux-allgemein/centos-firewall-konfigurieren-mit-firewalld -systemctl status firewalld &> /dev/null \ -&& for i in ssh http https ; do firewall-cmd --zone=public --add-service=${i} --permanent ; done \ -&& firewall-cmd --reload - -# ------------------------------------------- -# Additional requirements -# ------------------------------------------- -# extra packages for enterprise linux - -yum install epel-release -y - -yum install python3 python3-setuptools python3-pip python3-ldap memcached java-1.8.0-openjdk \ - libmemcached libreoffice-headless libreoffice-pyuno libffi-devel pwgen curl python3-devel gcc gcc-c++ -y - -pip3 install --timeout=3600 Pillow pylibmc captcha jinja2 sqlalchemy==1.3.8 psd-tools \ - django-pylibmc django-simple-captcha - -# start memcached on system boot -systemctl enable --now memcached - -# ------------------------------------------- -# Install nginx -# ------------------------------------------- -yum install nginx -y -systemctl enable nginx -rm -rf /etc/nginx/conf.d/* - -cat > /etc/nginx/conf.d/seafile.conf << EOF -log_format seafileformat '\$http_x_forwarded_for \$remote_addr [\$time_local] "\$request" \$status \$body_bytes_sent "\$http_referer" "\$http_user_agent" \$upstream_response_time'; - -server { - listen 80; - server_name seafile.example.com; - - proxy_set_header X-Forwarded-For \$remote_addr; - - location / { - proxy_pass http://127.0.0.1:8000; - proxy_set_header Host \$host; - proxy_set_header X-Real-IP \$remote_addr; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Host \$server_name; - proxy_set_header X-Forwarded-Proto \$scheme; - proxy_read_timeout 1200s; - - # used for view/edit office file via Office Online Server - client_max_body_size 0; - - access_log /var/log/nginx/seahub.access.log seafileformat; - error_log /var/log/nginx/seahub.error.log; - } - - location /seafhttp { - rewrite ^/seafhttp(.*)$ \$1 break; - proxy_pass http://127.0.0.1:8082; - client_max_body_size 0; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - proxy_connect_timeout 36000s; - proxy_read_timeout 36000s; - - access_log /var/log/nginx/seafhttp.access.log seafileformat; - error_log /var/log/nginx/seafhttp.error.log; - } - location /media { - root ${SEAFILE_SERVER_HOME}/seafile-server-latest/seahub; - } - location /seafdav { - proxy_pass http://127.0.0.1:8080/seafdav; - proxy_set_header Host \$host; - proxy_set_header X-Real-IP \$remote_addr; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Host \$server_name; - proxy_set_header X-Forwarded-Proto \$scheme; - proxy_read_timeout 1200s; - - client_max_body_size 0; - - access_log /var/log/nginx/seafdav.access.log seafileformat; - error_log /var/log/nginx/seafdav.error.log; - } -} -EOF - -# Create optimized nginx.conf -cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.backup -cat > /etc/nginx/nginx.conf <<'ENDOFFILE' -user nginx nginx; -worker_processes 4; - -events { - worker_connections 8096; - multi_accept on; - use epoll; -} - -pid /var/run/nginx.pid; -worker_rlimit_nofile 40000; - -http { - server_tokens off; - server_names_hash_bucket_size 128; - client_max_body_size 50M; - include /etc/nginx/mime.types; - default_type application/octet-stream; - log_format main '$remote_addr - $remote_user [$time_local] "$request" ' - '$status $body_bytes_sent "$http_referer" ' - '"$http_user_agent" "$http_x_forwarded_for"'; - access_log /var/log/nginx/access.log main; - error_log /var/log/nginx/error.log warn; - sendfile on; - tcp_nopush on; - tcp_nodelay on; - client_body_timeout 12; - client_header_timeout 12; - keepalive_timeout 15; - send_timeout 10; - # Fully disabled gzip compression to mitigate Django BREACH attack: https://www.djangoproject.com/weblog/2013/aug/06/breach-and-django/ - gzip off; - #gzip_vary on; - #gzip_proxied expired no-cache no-store private auth any; - #gzip_comp_level 9; - #gzip_min_length 10240; - #gzip_buffers 16 8k; - #gzip_http_version 1.1; - #gzip_types text/plain text/css text/xml text/javascript application/javascript application/x-javascript application/xml font/woff2; - #gzip_disable "MSIE [1-6]."; - include /etc/nginx/conf.d/*.conf; -} -ENDOFFILE - -# Fix NGINX worker_processes to number of CPU cores -CPUS=$(cat /proc/cpuinfo | grep processor | wc | awk '{ print $1 }') -eval "sed -i 's/worker_processes.*/worker_processes $CPUS;/g' /etc/nginx/nginx.conf" - -systemctl restart nginx - -# ------------------------------------------- -# MariaDB -# ------------------------------------------- -if [[ -f "/root/.my.cnf" ]] ; -then - echo "MariaDB installed before, skip this part" - SQLROOTPW=`sed -n 's/password=//p' /root/.my.cnf` -else - yum install mariadb-server -y - systemctl start mariadb - systemctl enable mariadb - - SQLROOTPW=$(pwgen) - - mysqladmin -u root password $SQLROOTPW - - cat > /root/.my.cnf < /etc/systemd/system/seafile.service << EOF -[Unit] -Description=Seafile Server -After=network.target remote-fs.target mariadb.service - -[Service] -ExecStart=${SEAFILE_SERVER_HOME}/seafile-server-latest/seafile.sh start -ExecStop=${SEAFILE_SERVER_HOME}/seafile-server-latest/seafile.sh stop -User=${SEAFILE_SERVER_USER} -Group=${SEAFILE_SERVER_USER} -LimitNOFILE=infinity -Type=oneshot -RemainAfterExit=yes - -[Install] -WantedBy=multi-user.target -EOF -systemctl enable seafile - -cat > /etc/systemd/system/seahub.service << EOF -[Unit] -Description=Seafile Seahub -After=network.target seafile.service - -[Service] -ExecStart=${SEAFILE_SERVER_HOME}/seafile-server-latest/seahub.sh start -ExecStop=${SEAFILE_SERVER_HOME}/seafile-server-latest/seahub.sh stop -User=${SEAFILE_SERVER_USER} -Group=${SEAFILE_SERVER_USER} -Type=oneshot -RemainAfterExit=yes - -[Install] -WantedBy=multi-user.target -EOF -systemctl enable seahub - -# Seafile restart script -cat > /usr/local/sbin/seafile-server-restart << 'EOF' -#!/bin/bash -for ACTION in stop start ; do - for SERVICE in seafile seahub ; do - systemctl ${ACTION} ${SERVICE} - done -done -EOF -chmod 700 /usr/local/sbin/seafile-server-restart - -# ------------------------------------------- -# Seafile -# ------------------------------------------- -mkdir -p ${SEAFILE_SERVER_HOME}/installed -cd ${SEAFILE_SERVER_HOME} -if ! is_pro && [[ ! -e /opt/${SEAFILE_SERVER_PACKAGE} ]]; then - curl -OL ${SEAFILE_SERVER_PACKAGE_URL} -else - cp /opt/${SEAFILE_SERVER_PACKAGE} . -fi -tar xzf ${SEAFILE_SERVER_PACKAGE} - -mv ${SEAFILE_SERVER_PACKAGE} installed - - -# ------------------------------------------- -# Seafile DB -# ------------------------------------------- -if [[ -f "/opt/seafile.my.cnf" ]] ; -then - echo "MariaDB installed before, skip this part" - SQLSEAFILEPW=`sed -n 's/password=//p' /opt/seafile.my.cnf` -else - SQLSEAFILEPW=$(pwgen) - - cat > /opt/seafile.my.cnf <> ${DEST_SETTINGS_PY} < ${TOPDIR}/aio_seafile-server.log< -# -# This program is free software: you can redistribute it and/or modify -# it under the terms of the GNU Affero General Public License as published by -# the Free Software Foundation, either version 3 of the License, or -# (at your option) any later version. -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU Affero General Public License for more details. -# -# You should have received a copy of the GNU Affero General Public License -# along with this program. If not, see . -# -# - -if [[ $HOME == "" ]]; then - export HOME=/root -fi - -if [[ $SEAFILE_DEBUG != "" ]]; then - set -x -fi -set -e - -if [[ "$#" -ne 1 ]]; then - echo "You must specif Seafile version to install" - echo "Like: $0 8.0.0" - exit 1 -fi - -clear -cat < /dev/null 2>&1 ; -then - echo "Aborting because user ${SEAFILE_SERVER_USER} already exist" ; exit 1 -fi - -# ------------------------------------------- -# Setup permissive selinux -# ------------------------------------------- -# runtime -enforce=`getenforce` -if [[ "${enforce}" != "Disabled" ]]; then - setenforce 0 -fi -# permanently -sed -i 's/^SELINUX=.*/SELINUX=permissive/' /etc/selinux/config - -# ------------------------------------------- -# Setup firewall -# ------------------------------------------- -yum install firewalld -y -# https://www.optimox.de/tutorials/linux-allgemein/centos-firewall-konfigurieren-mit-firewalld -systemctl status firewalld &> /dev/null \ -&& for i in ssh http https ; do firewall-cmd --zone=public --add-service=${i} --permanent ; done \ -&& firewall-cmd --reload - -# ------------------------------------------- -# Additional requirements -# ------------------------------------------- -# extra packages for enterprise linux - -yum install epel-release -y - -yum install python3 python3-setuptools python3-pip python3-ldap memcached java-1.8.0-openjdk \ - libmemcached libreoffice-headless libreoffice-pyuno libffi-devel pwgen curl python3-devel mysql-devel gcc gcc-c++ -y - -pip3 install --timeout=3600 django==2.2.* future mysqlclient pymysql Pillow pylibmc captcha jinja2 sqlalchemy==1.4.3 \ - psd-tools django-pylibmc django-simple-captcha - -# start memcached on system boot -systemctl enable --now memcached - -# ------------------------------------------- -# Install nginx -# ------------------------------------------- -yum install nginx -y -systemctl enable nginx -rm -rf /etc/nginx/conf.d/* - -cat > /etc/nginx/conf.d/seafile.conf << EOF -log_format seafileformat '\$http_x_forwarded_for \$remote_addr [\$time_local] "\$request" \$status \$body_bytes_sent "\$http_referer" "\$http_user_agent" \$upstream_response_time'; - -server { - listen 80; - server_name seafile.example.com; - - proxy_set_header X-Forwarded-For \$remote_addr; - - location / { - proxy_pass http://127.0.0.1:8000; - proxy_set_header Host \$host; - proxy_set_header X-Real-IP \$remote_addr; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Host \$server_name; - proxy_set_header X-Forwarded-Proto \$scheme; - proxy_read_timeout 1200s; - - # used for view/edit office file via Office Online Server - client_max_body_size 0; - - access_log /var/log/nginx/seahub.access.log seafileformat; - error_log /var/log/nginx/seahub.error.log; - } - - location /seafhttp { - rewrite ^/seafhttp(.*)$ \$1 break; - proxy_pass http://127.0.0.1:8082; - client_max_body_size 0; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - proxy_connect_timeout 36000s; - proxy_read_timeout 36000s; - - access_log /var/log/nginx/seafhttp.access.log seafileformat; - error_log /var/log/nginx/seafhttp.error.log; - } - location /media { - root ${SEAFILE_SERVER_HOME}/seafile-server-latest/seahub; - } - location /seafdav { - proxy_pass http://127.0.0.1:8080/seafdav; - proxy_set_header Host \$host; - proxy_set_header X-Real-IP \$remote_addr; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Host \$server_name; - proxy_set_header X-Forwarded-Proto \$scheme; - proxy_read_timeout 1200s; - - client_max_body_size 0; - - access_log /var/log/nginx/seafdav.access.log seafileformat; - error_log /var/log/nginx/seafdav.error.log; - } -} -EOF - -# Create optimized nginx.conf -cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.backup -cat > /etc/nginx/nginx.conf <<'ENDOFFILE' -user nginx nginx; -worker_processes 4; - -events { - worker_connections 8096; - multi_accept on; - use epoll; -} - -pid /var/run/nginx.pid; -worker_rlimit_nofile 40000; - -http { - server_tokens off; - server_names_hash_bucket_size 128; - client_max_body_size 50M; - include /etc/nginx/mime.types; - default_type application/octet-stream; - log_format main '$remote_addr - $remote_user [$time_local] "$request" ' - '$status $body_bytes_sent "$http_referer" ' - '"$http_user_agent" "$http_x_forwarded_for"'; - access_log /var/log/nginx/access.log main; - error_log /var/log/nginx/error.log warn; - sendfile on; - tcp_nopush on; - tcp_nodelay on; - client_body_timeout 12; - client_header_timeout 12; - keepalive_timeout 15; - send_timeout 10; - # Fully disabled gzip compression to mitigate Django BREACH attack: https://www.djangoproject.com/weblog/2013/aug/06/breach-and-django/ - gzip off; - #gzip_vary on; - #gzip_proxied expired no-cache no-store private auth any; - #gzip_comp_level 9; - #gzip_min_length 10240; - #gzip_buffers 16 8k; - #gzip_http_version 1.1; - #gzip_types text/plain text/css text/xml text/javascript application/javascript application/x-javascript application/xml font/woff2; - #gzip_disable "MSIE [1-6]."; - include /etc/nginx/conf.d/*.conf; -} -ENDOFFILE - -# Fix NGINX worker_processes to number of CPU cores -CPUS=$(cat /proc/cpuinfo | grep processor | wc | awk '{ print $1 }') -eval "sed -i 's/worker_processes.*/worker_processes $CPUS;/g' /etc/nginx/nginx.conf" - -systemctl restart nginx - -# ------------------------------------------- -# MariaDB -# ------------------------------------------- -if [[ -f "/root/.my.cnf" ]] ; -then - echo "MariaDB installed before, skip this part" - SQLROOTPW=`sed -n 's/password=//p' /root/.my.cnf` -else - yum install mariadb-server -y - systemctl start mariadb - systemctl enable mariadb - - SQLROOTPW=$(pwgen) - - mysqladmin -u root password $SQLROOTPW - - cat > /root/.my.cnf < /etc/systemd/system/seafile.service << EOF -[Unit] -Description=Seafile Server -After=network.target remote-fs.target mariadb.service - -[Service] -ExecStart=${SEAFILE_SERVER_HOME}/seafile-server-latest/seafile.sh start -ExecStop=${SEAFILE_SERVER_HOME}/seafile-server-latest/seafile.sh stop -User=${SEAFILE_SERVER_USER} -Group=${SEAFILE_SERVER_USER} -LimitNOFILE=infinity -Type=oneshot -RemainAfterExit=yes - -[Install] -WantedBy=multi-user.target -EOF -systemctl enable seafile - -cat > /etc/systemd/system/seahub.service << EOF -[Unit] -Description=Seafile Seahub -After=network.target seafile.service - -[Service] -ExecStart=${SEAFILE_SERVER_HOME}/seafile-server-latest/seahub.sh start -ExecStop=${SEAFILE_SERVER_HOME}/seafile-server-latest/seahub.sh stop -User=${SEAFILE_SERVER_USER} -Group=${SEAFILE_SERVER_USER} -Type=oneshot -RemainAfterExit=yes - -[Install] -WantedBy=multi-user.target -EOF -systemctl enable seahub - -# Seafile restart script -cat > /usr/local/sbin/seafile-server-restart << 'EOF' -#!/bin/bash -for ACTION in stop start ; do - for SERVICE in seafile seahub ; do - systemctl ${ACTION} ${SERVICE} - done -done -EOF -chmod 700 /usr/local/sbin/seafile-server-restart - -# ------------------------------------------- -# Seafile -# ------------------------------------------- -mkdir -p ${SEAFILE_SERVER_HOME}/installed -cd ${SEAFILE_SERVER_HOME} -if ! is_pro && [[ ! -e /opt/${SEAFILE_SERVER_PACKAGE} ]]; then - curl -OL ${SEAFILE_SERVER_PACKAGE_URL} -else - cp /opt/${SEAFILE_SERVER_PACKAGE} . -fi -tar xzf ${SEAFILE_SERVER_PACKAGE} - -mv ${SEAFILE_SERVER_PACKAGE} installed - - -# ------------------------------------------- -# Seafile DB -# ------------------------------------------- -if [[ -f "/opt/seafile.my.cnf" ]] ; -then - echo "MariaDB installed before, skip this part" - SQLSEAFILEPW=`sed -n 's/password=//p' /opt/seafile.my.cnf` -else - SQLSEAFILEPW=$(pwgen) - - cat > /opt/seafile.my.cnf <> ${DEST_SETTINGS_PY} < ${TOPDIR}/aio_seafile-server.log< -# -# This program is free software: you can redistribute it and/or modify -# it under the terms of the GNU Affero General Public License as published by -# the Free Software Foundation, either version 3 of the License, or -# (at your option) any later version. -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU Affero General Public License for more details. -# -# You should have received a copy of the GNU Affero General Public License -# along with this program. If not, see . -# -# - -if [[ $HOME == "" ]]; then - export HOME=/root -fi - -if [[ $SEAFILE_DEBUG != "" ]]; then - set -x -fi -set -e - -if [[ "$#" -ne 1 ]]; then - echo "You must specif Seafile version to install" - echo "Like: $0 7.0.0" - exit 1 -fi - -clear -cat < /dev/null 2>&1 ; -then - echo "Aborting because user ${SEAFILE_SERVER_USER} already exist" ; exit 1 -fi - -# ------------------------------------------- -# Setup permissive selinux -# ------------------------------------------- -# runtime -enforce=`getenforce` -if [[ "${enforce}" != "Disabled" ]]; then - setenforce 0 -fi -# permanently -sed -i 's/^SELINUX=.*/SELINUX=permissive/' /etc/selinux/config - -# ------------------------------------------- -# Setup firewall -# ------------------------------------------- -yum install firewalld fail2ban -y -# https://www.optimox.de/tutorials/linux-allgemein/centos-firewall-konfigurieren-mit-firewalld -systemctl status firewalld &> /dev/null \ -&& for i in ssh http https ; do firewall-cmd --zone=public --add-service=${i} --permanent ; done \ -&& firewall-cmd --reload - -# ------------------------------------------- -# Additional requirements -# ------------------------------------------- -# extra packages for enterprise linux - -yum install epel-release -y -yum upgrade -y - -if [[ ${SEAFILE_VERSION} =~ 6\.[0-9]*\.[0-9]* ]]; then - yum install python-setuptools MySQL-python memcached python-urllib3 \ - pwgen curl openssl python-ldap java-1.8.0-openjdk poppler-utils libreoffice python-requests \ - libreoffice-headless libreoffice-pyuno wqy-microhei-fonts wqy-zenhei-fonts wqy-unibit-fonts \ - gcc libffi-devel python-devel openssl-devel libmemcached libmemcached-devel python2-pip -y - - pip install pylibmc==1.6.0 django-pylibmc==0.6.1 - pip install --timeout=3600 Pillow==4.3.0 - pip install psd-tools==1.4 -else - yum install python-setuptools MySQL-python memcached python-urllib3 \ - pwgen curl openssl python-ldap java-1.8.0-openjdk poppler-utils libreoffice \ - libreoffice-headless libreoffice-pyuno wqy-microhei-fonts wqy-zenhei-fonts wqy-unibit-fonts \ - libffi-devel openssl-devel libmemcached -y -fi - -# start memcached on system boot -systemctl enable --now memcached - -# ------------------------------------------- -# Install nginx -# ------------------------------------------- -yum install nginx -y -systemctl enable nginx -rm -rf /etc/nginx/conf.d/* - -cat > /etc/nginx/conf.d/seafile.conf << EOF -log_format seafileformat '\$http_x_forwarded_for \$remote_addr [\$time_local] "\$request" \$status \$body_bytes_sent "\$http_referer" "\$http_user_agent" \$upstream_response_time'; - -server { - listen 80; - server_name seafile.example.com; - - proxy_set_header X-Forwarded-For \$remote_addr; - - location / { - proxy_pass http://127.0.0.1:8000; - proxy_set_header Host \$host; - proxy_set_header X-Real-IP \$remote_addr; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Host \$server_name; - proxy_set_header X-Forwarded-Proto \$scheme; - proxy_read_timeout 1200s; - - # used for view/edit office file via Office Online Server - client_max_body_size 0; - - access_log /var/log/nginx/seahub.access.log seafileformat; - error_log /var/log/nginx/seahub.error.log; - } - - location /seafhttp { - rewrite ^/seafhttp(.*)$ \$1 break; - proxy_pass http://127.0.0.1:8082; - client_max_body_size 0; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - proxy_connect_timeout 36000s; - proxy_read_timeout 36000s; - - access_log /var/log/nginx/seafhttp.access.log seafileformat; - error_log /var/log/nginx/seafhttp.error.log; - } - location /media { - root ${SEAFILE_SERVER_HOME}/seafile-server-latest/seahub; - } - location /seafdav { - fastcgi_pass 127.0.0.1:8080; - fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name; - fastcgi_param PATH_INFO \$fastcgi_script_name; - fastcgi_param SERVER_PROTOCOL \$server_protocol; - fastcgi_param QUERY_STRING \$query_string; - fastcgi_param REQUEST_METHOD \$request_method; - fastcgi_param CONTENT_TYPE \$content_type; - fastcgi_param CONTENT_LENGTH \$content_length; - fastcgi_param SERVER_ADDR \$server_addr; - fastcgi_param SERVER_PORT \$server_port; - fastcgi_param SERVER_NAME \$server_name; - fastcgi_param REMOTE_ADDR \$remote_addr; - - client_max_body_size 0; - - access_log /var/log/nginx/seafdav.access.log seafileformat; - error_log /var/log/nginx/seafdav.error.log; - } -} -EOF - -# Create optimized nginx.conf -cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.backup -cat > /etc/nginx/nginx.conf <<'ENDOFFILE' -user nginx nginx; -worker_processes 4; - -events { - worker_connections 8096; - multi_accept on; - use epoll; -} - -pid /var/run/nginx.pid; -worker_rlimit_nofile 40000; - -http { - server_tokens off; - server_names_hash_bucket_size 128; - client_max_body_size 50M; - include /etc/nginx/mime.types; - default_type application/octet-stream; - log_format main '$remote_addr - $remote_user [$time_local] "$request" ' - '$status $body_bytes_sent "$http_referer" ' - '"$http_user_agent" "$http_x_forwarded_for"'; - access_log /var/log/nginx/access.log main; - error_log /var/log/nginx/error.log warn; - sendfile on; - tcp_nopush on; - tcp_nodelay on; - client_body_timeout 12; - client_header_timeout 12; - keepalive_timeout 15; - send_timeout 10; - # Fully disabled gzip compression to mitigate Django BREACH attack: https://www.djangoproject.com/weblog/2013/aug/06/breach-and-django/ - gzip off; - #gzip_vary on; - #gzip_proxied expired no-cache no-store private auth any; - #gzip_comp_level 9; - #gzip_min_length 10240; - #gzip_buffers 16 8k; - #gzip_http_version 1.1; - #gzip_types text/plain text/css text/xml text/javascript application/javascript application/x-javascript application/xml font/woff2; - #gzip_disable "MSIE [1-6]."; - include /etc/nginx/conf.d/*.conf; -} -ENDOFFILE - -# Fix NGINX worker_processes to number of CPU cores -CPUS=$(cat /proc/cpuinfo | grep processor | wc | awk '{ print $1 }') -eval "sed -i 's/worker_processes.*/worker_processes $CPUS;/g' /etc/nginx/nginx.conf" - -systemctl restart nginx - -# ------------------------------------------- -# MariaDB -# ------------------------------------------- -if [[ -f "/root/.my.cnf" ]] ; -then - echo "MariaDB installed before, skip this part" - SQLROOTPW=`sed -n 's/password=//p' /root/.my.cnf` -else - yum install mariadb-server -y - systemctl start mariadb - systemctl enable mariadb - - SQLROOTPW=$(pwgen) - - mysqladmin -u root password $SQLROOTPW - - cat > /root/.my.cnf < /etc/systemd/system/seafile.service << EOF -[Unit] -Description=Seafile Server -After=network.target remote-fs.target mariadb.service - -[Service] -ExecStart=${SEAFILE_SERVER_HOME}/seafile-server-latest/seafile.sh start -ExecStop=${SEAFILE_SERVER_HOME}/seafile-server-latest/seafile.sh stop -User=${SEAFILE_SERVER_USER} -Group=${SEAFILE_SERVER_USER} -LimitNOFILE=infinity -Type=oneshot -RemainAfterExit=yes - -[Install] -WantedBy=multi-user.target -EOF -systemctl enable seafile - -cat > /etc/systemd/system/seahub.service << EOF -[Unit] -Description=Seafile Seahub -After=network.target seafile.service - -[Service] -ExecStart=${SEAFILE_SERVER_HOME}/seafile-server-latest/seahub.sh start -ExecStop=${SEAFILE_SERVER_HOME}/seafile-server-latest/seahub.sh stop -User=${SEAFILE_SERVER_USER} -Group=${SEAFILE_SERVER_USER} -Type=oneshot -RemainAfterExit=yes - -[Install] -WantedBy=multi-user.target -EOF -systemctl enable seahub - -# Seafile restart script -cat > /usr/local/sbin/seafile-server-restart << 'EOF' -#!/bin/bash -for ACTION in stop start ; do - for SERVICE in seafile seahub ; do - systemctl ${ACTION} ${SERVICE} - done -done -EOF -chmod 700 /usr/local/sbin/seafile-server-restart - -# ------------------------------------------- -# Seafile -# ------------------------------------------- -mkdir -p ${SEAFILE_SERVER_HOME}/installed -cd ${SEAFILE_SERVER_HOME} -if ! is_pro && [[ ! -e /opt/${SEAFILE_SERVER_PACKAGE} ]]; then - curl -OL ${SEAFILE_SERVER_PACKAGE_URL} -else - cp /opt/${SEAFILE_SERVER_PACKAGE} . -fi -tar xzf ${SEAFILE_SERVER_PACKAGE} - -mv ${SEAFILE_SERVER_PACKAGE} installed - - -# ------------------------------------------- -# Seafile DB -# ------------------------------------------- -if [[ -f "/opt/seafile.my.cnf" ]] ; -then - echo "MariaDB installed before, skip this part" - SQLSEAFILEPW=`sed -n 's/password=//p' /opt/seafile.my.cnf` -else - SQLSEAFILEPW=$(pwgen) - - cat > /opt/seafile.my.cnf <> ${DEST_SETTINGS_PY} < ${TOPDIR}/aio_seafile-server.log< -# Copyright 2016, Zheng Xie -# -# This program is free software: you can redistribute it and/or modify -# it under the terms of the GNU Affero General Public License as published by -# the Free Software Foundation, either version 3 of the License, or -# (at your option) any later version. -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU Affero General Public License for more details. -# -# You should have received a copy of the GNU Affero General Public License -# along with this program. If not, see . -# -# - -if [[ $HOME == "" ]]; then - export HOME=/root -fi - -if [[ $SEAFILE_DEBUG != "" ]]; then - set -x -fi -set -e - -if [[ "$#" -ne 1 ]]; then - echo "You must specif Seafile version to install" - echo "Like: $0 7.0.0" - exit 1 -fi - -clear -cat < /etc/nginx/sites-available/seafile.conf << EOF -log_format seafileformat '\$http_x_forwarded_for \$remote_addr [\$time_local] "\$request" \$status \$body_bytes_sent "\$http_referer" "\$http_user_agent" \$upstream_response_time'; - -server { - listen 80; - server_name seafile.example.com; - - proxy_set_header X-Forwarded-For \$remote_addr; - - location / { - proxy_pass http://127.0.0.1:8000; - proxy_set_header Host \$host; - proxy_set_header X-Real-IP \$remote_addr; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Host \$server_name; - proxy_set_header X-Forwarded-Proto \$scheme; - proxy_read_timeout 1200s; - - # used for view/edit office file via Office Online Server - client_max_body_size 0; - - access_log /var/log/nginx/seahub.access.log seafileformat; - error_log /var/log/nginx/seahub.error.log; - } - - location /seafhttp { - rewrite ^/seafhttp(.*)$ \$1 break; - proxy_pass http://127.0.0.1:8082; - client_max_body_size 0; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - proxy_connect_timeout 36000s; - proxy_read_timeout 36000s; - - access_log /var/log/nginx/seafhttp.access.log seafileformat; - error_log /var/log/nginx/seafhttp.error.log; - } - location /media { - root ${SEAFILE_SERVER_HOME}/seafile-server-latest/seahub; - } - location /seafdav { - fastcgi_pass 127.0.0.1:8080; - fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name; - fastcgi_param PATH_INFO \$fastcgi_script_name; - fastcgi_param SERVER_PROTOCOL \$server_protocol; - fastcgi_param QUERY_STRING \$query_string; - fastcgi_param REQUEST_METHOD \$request_method; - fastcgi_param CONTENT_TYPE \$content_type; - fastcgi_param CONTENT_LENGTH \$content_length; - fastcgi_param SERVER_ADDR \$server_addr; - fastcgi_param SERVER_PORT \$server_port; - fastcgi_param SERVER_NAME \$server_name; - fastcgi_param REMOTE_ADDR \$remote_addr; - - client_max_body_size 0; - - access_log /var/log/nginx/seafdav.access.log seafileformat; - error_log /var/log/nginx/seafdav.error.log; - } -} -EOF - -ln -sf /etc/nginx/sites-available/seafile.conf /etc/nginx/sites-enabled/seafile.conf - -service nginx restart - - -# ------------------------------------------- -# MariaDB -# ------------------------------------------- -if [[ -f "/root/.my.cnf" ]] ; -then - echo "MariaDB installed before, skip this part" - SQLROOTPW=`sed -n 's/password=//p' /root/.my.cnf` -else - DEBIAN_FRONTEND=noninteractive apt-get install -y mariadb-server - - SQLROOTPW=$(pwgen) - - mysqladmin -u root password $SQLROOTPW - - cat > /root/.my.cnf < /etc/init.d/seafile-server << EOF -#!/bin/bash -### BEGIN INIT INFO -# Provides: seafile-server -# Required-Start: \$remote_fs \$syslog mysql -# Required-Stop: \$remote_fs \$syslog -# Default-Start: 2 3 4 5 -# Default-Stop: 0 1 6 -# Short-Description: Seafile server -# Description: Start Seafile server -### END INIT INFO - -# Author: Alexander Jackson - -# Change the value of "seafile_dir" to your path of seafile installation -user=${SEAFILE_SERVER_USER} -seafile_dir=${SEAFILE_SERVER_HOME} -script_path=\${seafile_dir}/seafile-server-latest -seafile_init_log=\${seafile_dir}/logs/seafile.init.log -seahub_init_log=\${seafile_dir}/logs/seahub.init.log - - -case "\$1" in - start) - sudo -u \${user} \${script_path}/seafile.sh start >> \${seafile_init_log} - sudo -u \${user} \${script_path}/seahub.sh start >> \${seahub_init_log} - ;; - restart) - sudo -u \${user} \${script_path}/seafile.sh restart >> \${seafile_init_log} - sudo -u \${user} \${script_path}/seahub.sh restart >> \${seahub_init_log} - ;; - stop) - sudo -u \${user} \${script_path}/seafile.sh \$1 >> \${seafile_init_log} - sudo -u \${user} \${script_path}/seahub.sh \$1 >> \${seahub_init_log} - ;; - *) - echo "Usage: /etc/init.d/seafile-server {start|stop|restart}" - exit 1 - ;; -esac -EOF - -chmod +x /etc/init.d/seafile-server -update-rc.d seafile-server defaults - - -# ------------------------------------------- -# Seafile -# ------------------------------------------- -mkdir -p ${SEAFILE_SERVER_HOME}/installed -cd ${SEAFILE_SERVER_HOME} -if ! is_pro && [[ ! -e /opt/${SEAFILE_SERVER_PACKAGE} ]]; then - curl -OL ${SEAFILE_SERVER_PACKAGE_URL} -else - cp /opt/${SEAFILE_SERVER_PACKAGE} . -fi -tar xzf ${SEAFILE_SERVER_PACKAGE} - -mv ${SEAFILE_SERVER_PACKAGE} installed - - -# ------------------------------------------- -# Seafile DB -# ------------------------------------------- -if [[ -f "/opt/seafile.my.cnf" ]] ; -then - echo "MariaDB installed before, skip this part" - SQLSEAFILEPW=`sed -n 's/password=//p' /opt/seafile.my.cnf` -else - SQLSEAFILEPW=$(pwgen) - - cat > /opt/seafile.my.cnf <> ${DEST_SETTINGS_PY} < ${TOPDIR}/aio_seafile-server.log< -# -# This program is free software: you can redistribute it and/or modify -# it under the terms of the GNU Affero General Public License as published by -# the Free Software Foundation, either version 3 of the License, or -# (at your option) any later version. -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU Affero General Public License for more details. -# -# You should have received a copy of the GNU Affero General Public License -# along with this program. If not, see . -# -# -#set -x -# ------------------------------------------- -# Vars -# ------------------------------------------- -CLASS_DEFAULT=1 -RSA=4096 - - -# ------------------------------------------- -# About -# ------------------------------------------- -cat << EOF - - StartSSL certificate creator for NGINX - - Go to https://www.startssl.com and sign up. Decide - if the free class1 certs are good enough or if you - need paid class2 or class3 certificates. Class1 - certificates are the default after signing up. You - don't need to do anything else to issue class1 certs. - - For questions or suggestions please contact me at - alexander.jackson@seafile.de - - ----------------------------------------------------------------- - Hit return to proceed or CTRL-C to abort. - -EOF - -read dummy - - -# ------------------------------------------- -# Start working -# ------------------------------------------- -read -p "New certs class? [$CLASS_DEFAULT]" CLASS -CLASS="${CLASS:-$CLASS_DEFAULT}" - -if [[ $CLASS > 3 ]]; then - echo Wrong class type. Select 1, 2 or 3. Aborting.. ; exit 1 -fi - -read -p "New certs domain name? " DOMAIN - -CERT_DIR=$(pwd)/certs/${DOMAIN} - - -# ------------------------------------------- -# Abort if CERT_DIR exists -# ------------------------------------------- -if [[ -d "${CERT_DIR}" ]] ; -then - echo " Aborting because directory ${CERT_DIR} already exist" ; exit 1 -fi - -mkdir -p ${CERT_DIR} - - -# ------------------------------------------- -# Create certificate signing request and private key in batch mode -# ------------------------------------------- -openssl req -new -nodes -keyout ${CERT_DIR}/${DOMAIN}.key -out ${CERT_DIR}/${DOMAIN}.csr -newkey rsa:${RSA} -batch - - -# ------------------------------------------- -# Print instructions -# ------------------------------------------- -cat << EOF - - Follow these steps next: - - 1. Go to https://www.startssl.com > - 2. Certificates Wizard > - 3. Certificate Target: (Web Server SSL/TLS Certificate) > Continue > - 4. Generate Private Key > Skip > - 5. Submit Certificate Request (CSR) (Paste your csr shown below) - -EOF - -cat ${CERT_DIR}/${DOMAIN}.csr - - - -# ------------------------------------------- -# Print more instructions -# ------------------------------------------- -cat << EOF - - 6. Continue >> - 7. Certificate Request Received > Continue >> - 8. Add Domains: (select your domain) - 9. Optionally Add Domains > Add More < (repeat until happy) > Continue >> - 10. Ready Processing Certificate > Continue >> - -EOF - -echo "Hit return when the certificate is displayed." -read dummy - -echo "Replace content with certificate, save and exit." > ${CERT_DIR}/${DOMAIN}.crt - -nano ${CERT_DIR}/${DOMAIN}.crt - -echo "Creating class ${CLASS} chained certificate for NGINX" - - -# ------------------------------------------- -# Create certificate change for usage with NGINX -# ------------------------------------------- -cat ${CERT_DIR}/${DOMAIN}.crt > ${CERT_DIR}/${DOMAIN}_chained.crt - -if [[ $CLASS -eq 1 ]]; then - wget -O - https://www.startssl.com/certs/class1/sha2/pem/sub.class1.server.sha2.ca.pem >> ${CERT_DIR}/${DOMAIN}_chained.crt -fi - -if [[ $CLASS -eq 2 ]]; then - wget -O - https://www.startssl.com/certs/class2/sha2/pem/sub.class2.server.sha2.ca.pem >> ${CERT_DIR}/${DOMAIN}_chained.crt -fi - -if [[ $CLASS -eq 3 ]]; then - wget -O - https://www.startssl.com/certs/class3/sha2/pem/sub.class3.server.sha2.ca.pem >> ${CERT_DIR}/${DOMAIN}_chained.crt -fi - -wget -O - https://www.startssl.com/certs/ca-sha2.pem >> ${CERT_DIR}/${DOMAIN}_chained.crt - - -# ------------------------------------------- -# List new csr and key for informational value -# ------------------------------------------- -echo "Our newly Created files:" -ls -ahl ${CERT_DIR} - - -# ------------------------------------------- -# Print -# ------------------------------------------- -cat << EOF - - Implementation example for NGINX: - - [...] - ssl on; - ssl_certificate ${CERT_DIR}/${DOMAIN}_chained.crt; - ssl_certificate_key ${CERT_DIR}/${DOMAIN}.key; - [...] - - Finished! - -EOF diff --git a/tests/assert.sh b/tests/assert.sh deleted file mode 100644 index f3d03d8..0000000 --- a/tests/assert.sh +++ /dev/null @@ -1,139 +0,0 @@ -#!/bin/bash -# assert.sh 1.0 - bash unit testing framework -# Copyright (C) 2009, 2010, 2011, 2012 Robert Lehmann -# -# http://github.com/lehmannro/assert.sh -# -# This program is free software: you can redistribute it and/or modify -# it under the terms of the GNU Lesser General Public License as published -# by the Free Software Foundation, either version 3 of the License, or -# (at your option) any later version. -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU Lesser General Public License for more details. -# -# You should have received a copy of the GNU Lesser General Public License -# along with this program. If not, see . - -export DISCOVERONLY=${DISCOVERONLY:-} -export DEBUG=${DEBUG:-} -export STOP=${STOP:-} -export INVARIANT=${INVARIANT:-} - -args="$(getopt -n "$0" -l verbose,help,stop,discover,invariant vhxdi $*)" \ -|| exit -1 -for arg in $args; do - case "$arg" in - -h) - echo "$0 [-vxid] [--verbose] [--stop] [--invariant] [--discover]" - echo "`sed 's/./ /g' <<< "$0"` [-h] [--help]" - exit 0;; - --help) - cat < [stdin] - (( tests_ran++ )) - [[ -n "$DISCOVERONLY" ]] && return - # printf required for formatting - printf -v expected "x${2:-}" # x required to overwrite older results - result="$(eval 2>/dev/null $1 <<< ${3:-})" - # Note: $expected is already decorated - if [[ "x$result" == "$expected" ]]; then - [[ -n "$DEBUG" ]] && echo -n . - return - fi - [[ -n "$DEBUG" ]] && echo -n X - result="$(sed -e :a -e '$!N;s/\n/\\n/;ta' <<< "$result")" - [[ -z "$result" ]] && result="nothing" || result="\"$result\"" - [[ -z "$2" ]] && expected="nothing" || expected="\"$2\"" - failure="expected $expected${_indent}got $result" - report="test #$tests_ran \"$1${3:+ <<< $3}\" failed:${_indent}$failure" - tests_errors[$tests_failed]="$report" - (( tests_failed++ )) - if [[ -n "$STOP" ]]; then - [[ -n "$DEBUG" ]] && echo - echo "$report" - exit 1 - fi -} - -assert_raises() { - # assert_raises [stdin] - (( tests_ran++ )) - [[ -n "$DISCOVERONLY" ]] && return - (eval $1 <<< ${3:-}) > /dev/null 2>&1 - status=$? - expected=${2:-0} - if [[ "$status" -eq "$expected" ]]; then - [[ -n "$DEBUG" ]] && echo -n . - return - fi - [[ -n "$DEBUG" ]] && echo -n X - failure="program terminated with code $status instead of $expected" - report="test #$tests_ran \"$1${3:+ <<< $3}\" failed:${_indent}$failure" - tests_errors[$tests_failed]="$report" - (( tests_failed++ )) - if [[ -n "$STOP" ]]; then - [[ -n "$DEBUG" ]] && echo - echo "$report" - exit 1 - fi -} - -_assert_reset diff --git a/tests/post-deploy_test.sh b/tests/post-deploy_test.sh deleted file mode 100755 index 59f6334..0000000 --- a/tests/post-deploy_test.sh +++ /dev/null @@ -1,5 +0,0 @@ -#!/bin/bash - -. tests/assert.sh - -echo "Tests for seafile server package..."