You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
225 lines
6.5 KiB
225 lines
6.5 KiB
#!/bin/bash
|
|
# info: add mail domain
|
|
# options: USER DOMAIN [ANTISPAM] [ANTIVIRUS] [DKIM] [DKIM_SIZE] [RESTART] [REJECT_SPAM]
|
|
#
|
|
# example: v-add-mail-domain admin mydomain.tld
|
|
#
|
|
# This function adds MAIL domain.
|
|
|
|
#----------------------------------------------------------#
|
|
# Variables & Functions #
|
|
#----------------------------------------------------------#
|
|
|
|
# Argument definition
|
|
user=$1
|
|
domain=$2
|
|
antispam=${3-yes}
|
|
antivirus=${4-yes}
|
|
dkim=${5-yes}
|
|
dkim_size=${6-1024}
|
|
restart="$7"
|
|
reject=${8-no}
|
|
|
|
# Includes
|
|
# shellcheck source=/etc/hestiacp/hestia.conf
|
|
source /etc/hestiacp/hestia.conf
|
|
# shellcheck source=/usr/local/hestia/func/main.sh
|
|
source $HESTIA/func/main.sh
|
|
# shellcheck source=/usr/local/hestia/func/domain.sh
|
|
source $HESTIA/func/domain.sh
|
|
# shellcheck source=/usr/local/hestia/func/ip.sh
|
|
source $HESTIA/func/ip.sh
|
|
# shellcheck source=/usr/local/hestia/func/syshealth.sh
|
|
source $HESTIA/func/syshealth.sh
|
|
# load config file
|
|
source_conf "$HESTIA/conf/hestia.conf"
|
|
|
|
# Define mail user
|
|
if [ "$MAIL_SYSTEM" = 'exim4' ]; then
|
|
MAIL_USER=Debian-exim
|
|
else
|
|
MAIL_USER=exim
|
|
fi
|
|
|
|
# Additional argument formatting
|
|
format_domain
|
|
format_domain_idn
|
|
domain_utf=$(idn2 --quiet -d "$domain_idn")
|
|
|
|
#----------------------------------------------------------#
|
|
# Verifications #
|
|
#----------------------------------------------------------#
|
|
|
|
check_args '2' "$#" 'USER DOMAIN [ANTISPAM] [ANTIVIRUS] [DKIM] [DKIM_SIZE] [RESTART] [REJECT_SPAM]'
|
|
is_format_valid 'user' 'domain' 'antispam' 'antivirus' 'dkim' 'dkim_size' 'restart' 'reject'
|
|
is_system_enabled "$MAIL_SYSTEM" 'MAIL_SYSTEM'
|
|
is_object_valid 'user' 'USER' "$user"
|
|
is_object_unsuspended 'user' 'USER' "$user"
|
|
|
|
if [ "$($BIN/v-list-mail-domain $user $domain_utf plain | cut -f 1) " != "$domain" ]; then
|
|
is_domain_new 'mail' "$domain_utf"
|
|
fi
|
|
if [ "$($BIN/v-list-mail-domain $user $domain_idn plain | cut -f 1) " != "$domain" ]; then
|
|
is_domain_new 'mail' "$domain_idn"
|
|
else
|
|
is_domain_new 'mail' "$domain"
|
|
fi
|
|
if [ -z "$(is_ip_format_valid $domain)" ]; then
|
|
echo "Error: Invalid domain format. IP address detected as input."
|
|
exit 1
|
|
fi
|
|
|
|
is_package_full 'MAIL_DOMAINS'
|
|
is_dir_symlink $HOMEDIR/$user/mail
|
|
|
|
is_base_domain_owner "$domain"
|
|
|
|
# Perform verification if read-only mode is enabled
|
|
check_hestia_demo_mode
|
|
|
|
#----------------------------------------------------------#
|
|
# Action #
|
|
#----------------------------------------------------------#
|
|
|
|
source_conf "$USER_DATA/user.conf"
|
|
# Inherit web domain local ip address
|
|
domain_ip=$(get_object_value 'web' 'DOMAIN' "$domain" '$IP')
|
|
if [ ! -z "$domain_ip" ]; then
|
|
local_ip=$(get_real_ip "$domain_ip")
|
|
is_ip_valid "$local_ip" "$user"
|
|
else
|
|
get_user_ip
|
|
fi
|
|
|
|
# Generating timestamp
|
|
new_timestamp
|
|
|
|
if [ -z "$ANTISPAM_SYSTEM" ]; then
|
|
antispam="no"
|
|
reject="no"
|
|
fi
|
|
if [ -z "$ANTIVIRUS_SYSTEM" ]; then
|
|
antivirus="no"
|
|
fi
|
|
|
|
# Adding domain to mail.conf
|
|
s="DOMAIN='$domain' ANTIVIRUS='$antivirus' ANTISPAM='$antispam' REJECT='$reject' DKIM='$dkim' WEBMAIL=''"
|
|
s="$s SSL='no' LETSENCRYPT='no' CATCHALL='' ACCOUNTS='0' RATE_LIMIT='$RATE_LIMIT' U_DISK='0' SUSPENDED='no' TIME='$time'"
|
|
s="$s DATE='$date'"
|
|
echo $s >> $USER_DATA/mail.conf
|
|
touch $USER_DATA/mail/$domain.conf
|
|
|
|
syshealth_repair_mail_config
|
|
|
|
# Generating DKIM keys
|
|
if [ "$dkim" = 'yes' ]; then
|
|
openssl genrsa -out $USER_DATA/mail/$domain.pem $dkim_size &> /dev/null
|
|
openssl rsa -pubout -in $USER_DATA/mail/$domain.pem \
|
|
-out $USER_DATA/mail/$domain.pub &> /dev/null
|
|
fi
|
|
|
|
# Set permissions
|
|
chmod 660 $USER_DATA/mail/$domain.*
|
|
chmod 660 $USER_DATA/mail.conf
|
|
|
|
# Building exim configs
|
|
if [[ "$MAIL_SYSTEM" =~ exim ]]; then
|
|
mkdir $HOMEDIR/$user/conf/mail/$domain
|
|
mkdir $HOMEDIR/$user/mail/$domain_idn
|
|
touch $HOMEDIR/$user/conf/mail/$domain/aliases
|
|
touch $HOMEDIR/$user/conf/mail/$domain/passwd
|
|
touch $HOMEDIR/$user/conf/mail/$domain/fwd_only
|
|
touch $HOMEDIR/$user/conf/mail/$domain/accounts
|
|
ln -s $HOMEDIR/$user/conf/mail/$domain \
|
|
/etc/$MAIL_SYSTEM/domains/$domain_idn
|
|
|
|
# Seeting outgoing ip address
|
|
if [ -n "$local_ip" ]; then
|
|
echo "$local_ip" > $HOMEDIR/$user/conf/mail/$domain/ip
|
|
fi
|
|
|
|
if [ -n "$ANTISPAM_SYSTEM" ]; then
|
|
# Adding antispam protection
|
|
if [ "$antispam" = 'yes' ]; then
|
|
touch "$HOMEDIR/$user/conf/mail/$domain/antispam"
|
|
fi
|
|
if [ "$reject" = 'yes' ]; then
|
|
touch "$HOMEDIR/$user/conf/mail/$domain/reject_spam"
|
|
fi
|
|
fi
|
|
|
|
if [ -n "$ANTIVIRUS_SYSTEM" ]; then
|
|
# Adding antivirus protection
|
|
if [ "$antivirus" = 'yes' ]; then
|
|
touch "$HOMEDIR/$user/conf/mail/$domain/antivirus"
|
|
fi
|
|
fi
|
|
|
|
# Adding dkim support
|
|
if [ "$dkim" = 'yes' ]; then
|
|
cp -f $USER_DATA/mail/$domain.pem \
|
|
$HOMEDIR/$user/conf/mail/$domain/dkim.pem
|
|
fi
|
|
|
|
# Set permission
|
|
chmod 771 $HOMEDIR/$user/conf/mail/$domain
|
|
chmod 660 $HOMEDIR/$user/conf/mail/$domain/*
|
|
chmod 771 /etc/$MAIL_SYSTEM/domains/$domain_idn
|
|
chmod 770 $HOMEDIR/$user/mail/$domain_idn
|
|
|
|
# Set ownership
|
|
chown -R $MAIL_USER:mail $HOMEDIR/$user/conf/mail/$domain
|
|
if [ "$IMAP_SYSTEM" = 'dovecot' ]; then
|
|
chown -R dovecot:mail $HOMEDIR/$user/conf/mail/$domain/passwd
|
|
fi
|
|
chown $MAIL_USER:mail $HOMEDIR/$user/conf/mail/$domain/accounts
|
|
chown $user:mail $HOMEDIR/$user/mail/$domain_idn
|
|
fi
|
|
|
|
# Adding dkim dns records
|
|
if [ -n "$DNS_SYSTEM" ] && [ "$dkim" = 'yes' ]; then
|
|
check_dns_domain=$(is_object_valid 'dns' 'DOMAIN' "$domain")
|
|
if [ "$?" -eq 0 ]; then
|
|
p=$(cat $USER_DATA/mail/$domain.pub | grep -v ' KEY---' | tr -d '\n')
|
|
record='_domainkey'
|
|
policy="\"t=y; o=~;\""
|
|
$BIN/v-add-dns-record "$user" "$domain" "$record" TXT "$policy" '' '' 'no' '' 'yes'
|
|
|
|
record='mail._domainkey'
|
|
selector="\"v=DKIM1\; k=rsa\; p=$p\""
|
|
$BIN/v-add-dns-record "$user" "$domain" "$record" TXT "$selector" '' '' 'yes' '' 'yes'
|
|
fi
|
|
fi
|
|
|
|
# Add webmail configuration to mail domain
|
|
if [ -n "$WEB_SYSTEM" ] || [ -n "$PROXY_SYSTEM" ]; then
|
|
if [ -n "$IMAP_SYSTEM" ]; then
|
|
$BIN/v-add-mail-domain-webmail "$user" "$domain" '' 'no'
|
|
fi
|
|
fi
|
|
|
|
#----------------------------------------------------------#
|
|
# Hestia #
|
|
#----------------------------------------------------------#
|
|
|
|
# Increasing domain value
|
|
increase_user_value "$user" '$U_MAIL_DOMAINS'
|
|
|
|
if [ "$dkim" = 'yes' ]; then
|
|
increase_user_value "$user" '$U_MAIL_DKIM'
|
|
fi
|
|
|
|
# Restarting web server
|
|
$BIN/v-restart-web "$restart"
|
|
check_result $? "Web restart failed" > /dev/null
|
|
|
|
# Restarting proxy server
|
|
$BIN/v-restart-proxy "$restart"
|
|
check_result $? "Proxy restart failed" > /dev/null
|
|
|
|
# Logging
|
|
$BIN/v-log-action "$user" "Info" "Mail" "Added new mail domain ($domain)."
|
|
log_event "$OK" "$ARGUMENTS"
|
|
|
|
exit
|