This commit is contained in:
45
src/preinstall.sh
Normal file
45
src/preinstall.sh
Normal file
@@ -0,0 +1,45 @@
|
||||
#!/bin/bash
|
||||
USER="vctp"
|
||||
GROUP="dtms"
|
||||
|
||||
# Path to the custom sudoers file
|
||||
SUDOERS_FILE="/etc/sudoers.d/${USER}"
|
||||
|
||||
# create a group & user if not exists
|
||||
getent group "$GROUP" >/dev/null || groupadd -r "$GROUP"; /bin/true
|
||||
getent passwd "$USER" >/dev/null || useradd -r -g "$GROUP" -m -s /bin/bash -c "vctp service" "$USER"
|
||||
getent passwd tftp >/dev/null || useradd -r -g tftp -s /sbin/nologin tftp
|
||||
|
||||
# create vctp config directory if it doesn't exist
|
||||
[ -d /etc/dtms ] || mkdir -p /etc/dtms
|
||||
|
||||
# set group ownership on vctp config directory if not already done
|
||||
[ "$(stat -c "%G" /etc/dtms)" = "$GROUP" ] || chgrp -R "$GROUP" /etc/dtms
|
||||
|
||||
# set permissions on vctp config directory if not already done
|
||||
[ "$(stat -c "%a" /etc/dtms)" = "774" ] || chmod -R 774 /etc/dtms
|
||||
|
||||
# create vctp data directory if it doesn't exist
|
||||
[ -d /var/lib/vctp ] || mkdir -p /var/lib/vctp
|
||||
|
||||
# set user ownership on vctp data directory if not already done
|
||||
[ "$(stat -c "%U" /var/lib/vctp)" = "$USER" ] || chown -R "$USER" /var/lib/vctp
|
||||
|
||||
# set group ownership on vctp data directory if not already done
|
||||
[ "$(stat -c "%G" /var/lib/vctp)" = "$GROUP" ] || chgrp -R "$GROUP" /var/lib/vctp
|
||||
|
||||
# Check if firewalld is installed and active
|
||||
if command -v systemctl >/dev/null 2>&1 && systemctl is-enabled firewalld >/dev/null 2>&1 && systemctl is-active firewalld >/dev/null 2>&1; then
|
||||
echo "Firewalld is enabled and running. Adding necessary ports..."
|
||||
|
||||
# Open HTTPS port (443/tcp)
|
||||
firewall-cmd --permanent --add-service=https >/dev/null 2>&1
|
||||
|
||||
# Open custom application port (9443/tcp)
|
||||
firewall-cmd --permanent --add-port=9443/tcp >/dev/null 2>&1
|
||||
|
||||
# Reload firewalld to apply changes
|
||||
firewall-cmd --reload >/dev/null 2>&1
|
||||
else
|
||||
echo "Firewalld is not running or not enabled. Skipping firewall configuration."
|
||||
fi
|
||||
Reference in New Issue
Block a user