Add scripts from aech
This commit is contained in:
parent
4bbff4ba6f
commit
f0e8c19397
5 changed files with 367 additions and 0 deletions
279
aech/dnssec-keys.sh
Normal file
279
aech/dnssec-keys.sh
Normal file
|
|
@ -0,0 +1,279 @@
|
||||||
|
#!/bin/sh
|
||||||
|
# dnssec-keys: DNSSEC key management tool
|
||||||
|
#
|
||||||
|
# @home: https://github.com/northox/dnssec-reverb
|
||||||
|
# @license: Simplified BSD
|
||||||
|
# Copyright (c) 2019 Tobias Strobel <git@strobeltobias.de>.
|
||||||
|
# Based on work by:
|
||||||
|
# Copyright (c) 2017 Danny Fullerton <danny@mantor.org>.
|
||||||
|
# Copyright (c) 2009-2013 Kazunori Fujiwara <fujiwara@wide.ad.jp>.
|
||||||
|
|
||||||
|
PROG=`basename $0`
|
||||||
|
DIR=`dirname $0`
|
||||||
|
|
||||||
|
KEYDIR="/var/cache/bind/keys"
|
||||||
|
|
||||||
|
keygen="/usr/sbin/dnssec-keygen"
|
||||||
|
settime="/usr/sbin/dnssec-settime"
|
||||||
|
key2ds="/usr/sbin/dnssec-dsfromkey"
|
||||||
|
control="/usr/sbin/rndc"
|
||||||
|
RELOAD_COMMAND="$control loadkeys \$ZONE"
|
||||||
|
KSK_PARAM="-n zone -a ECDSAP384SHA384 -f ksk"
|
||||||
|
ZSK_PARAM="-n zone -a ECDSAP384SHA384"
|
||||||
|
DNSRECORD_PARAM="-2"
|
||||||
|
NOW=`date +%Y%m%d%H%M%S`
|
||||||
|
DEFAULT_EXPIRE=33
|
||||||
|
LOCKF=""
|
||||||
|
|
||||||
|
Fatal()
|
||||||
|
{
|
||||||
|
[ "$LOCKF" != "" ] && rm $LOCKF
|
||||||
|
echo $PROG: $1 >&2
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
# defaults
|
||||||
|
[ "$KEYDIR" = "" ] && Fatal "\$KEYDIR not set"
|
||||||
|
[ -d "$KEYDIR" ] || Fatal "\$KEYDIR not a directory ($KEYDIR)"
|
||||||
|
[ "$KEYBACKUPDIR" = "" ] && KEYBACKUPDIR="$KEYDIR/backup"
|
||||||
|
[ "$DNSRECORDDIR" = "" ] && DNSRECORDDIR="$KEYDIR/dnsrecord"
|
||||||
|
HEAD_ZSKNAME="zsk-"
|
||||||
|
HEAD_KSKNAME="ksk-"
|
||||||
|
HEAD_ZSSNAME="zss-"
|
||||||
|
HEAD_ZSRNAME="zsr-" # Removed ZSK
|
||||||
|
HEAD_KSSNAME="kss-"
|
||||||
|
|
||||||
|
# setup
|
||||||
|
[ ! -d $KEYBACKUPDIR ] && mkdir -p $KEYBACKUPDIR
|
||||||
|
[ ! -d $DNSRECORDDIR ] && mkdir -p $DNSRECORDDIR
|
||||||
|
|
||||||
|
cd $KEYDIR
|
||||||
|
|
||||||
|
_check_file()
|
||||||
|
{
|
||||||
|
while [ "$1" != "" ]; do
|
||||||
|
[ ! -s "$1" ] && Fatal "$1 does not exist."
|
||||||
|
shift
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
_check_nofile()
|
||||||
|
{
|
||||||
|
while [ "$1" != "" ]; do
|
||||||
|
[ -f "$1" ] && Fatal "$1 exist."
|
||||||
|
shift
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
_usage()
|
||||||
|
{
|
||||||
|
[ "$LOCKF" != "" ] && rm $LOCKF
|
||||||
|
cat <<EOF
|
||||||
|
usage: $PROG keygen <zone>
|
||||||
|
$PROG rmkeys <zone>
|
||||||
|
$PROG [-s] ksk-add <zone>
|
||||||
|
$PROG [-s] ksk-roll <zone>
|
||||||
|
$PROG [-s] zsk-add <zone>
|
||||||
|
$PROG [-s] zsk-roll <zone>
|
||||||
|
$PROG [-s] zsk-rmold <zone>
|
||||||
|
$PROG sign <zone>
|
||||||
|
$PROG status <zone>
|
||||||
|
EOF
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
sign()
|
||||||
|
{
|
||||||
|
chmod g+r *.*
|
||||||
|
eval $RELOAD_COMMAND
|
||||||
|
}
|
||||||
|
|
||||||
|
status()
|
||||||
|
{
|
||||||
|
DNSRECORD_FILE_TMP="$DNSRECORD_FILE.tmp"
|
||||||
|
if [ -f $KSK_FILE ]; then
|
||||||
|
echo -n "$ZONE's KSK = "
|
||||||
|
cat $KSK_FILE;
|
||||||
|
tail -n1 `cat $KSK_FILE`.key | tee $DNSRECORD_FILE_TMP
|
||||||
|
$key2ds $_DNSRECORD_PARAM `cat $KSK_FILE`.key | tee -a $DNSRECORD_FILE_TMP
|
||||||
|
fi
|
||||||
|
if [ -f $KSK_S_FILE ]; then
|
||||||
|
echo -n "$ZONE's next KSK = "
|
||||||
|
cat $KSK_S_FILE;
|
||||||
|
tail -n1 `cat $KSK_S_FILE`.key | tee $DNSRECORD_FILE_TMP
|
||||||
|
$key2ds $_DNSRECORD_PARAM `cat $KSK_S_FILE`.key | tee -a $DNSRECORD_FILE_TMP
|
||||||
|
fi
|
||||||
|
if [ -f $ZSK_FILE ]; then
|
||||||
|
echo -n "$ZONE's ZSK = "
|
||||||
|
cat $ZSK_FILE;
|
||||||
|
fi
|
||||||
|
if [ -f $ZSK_S_FILE ]; then
|
||||||
|
echo -n "$ZONE's next ZSK = "
|
||||||
|
cat $ZSK_S_FILE;
|
||||||
|
fi
|
||||||
|
if [ -f $ZSK_R_FILE ]; then
|
||||||
|
echo -n "$ZONE's previous ZSK = "
|
||||||
|
cat $ZSK_R_FILE;
|
||||||
|
fi
|
||||||
|
mv -f $DNSRECORD_FILE_TMP $DNSRECORD_FILE
|
||||||
|
}
|
||||||
|
|
||||||
|
keygensub()
|
||||||
|
{
|
||||||
|
echo "$keygen $1 $2"
|
||||||
|
newfile="$3"
|
||||||
|
tmpfile="$3.tmp"
|
||||||
|
_KEY=`$keygen $1 $2`
|
||||||
|
[ -f $_KEY.ds ] && rm $_KEY.ds
|
||||||
|
if [ ! -s $_KEY.key ]; then
|
||||||
|
rm $_KEY.key
|
||||||
|
Fatal "cannot write new key: $1 $2 $3"
|
||||||
|
fi
|
||||||
|
echo $_KEY > $tmpfile
|
||||||
|
read _KEY2 < $tmpfile
|
||||||
|
if [ "$_KEY" != "$_KEY2" ]; then
|
||||||
|
rm $tmpfile
|
||||||
|
rm $_KEY.key
|
||||||
|
Fatal "cannot write $tmpfile"
|
||||||
|
fi
|
||||||
|
mv $tmpfile $newfile
|
||||||
|
}
|
||||||
|
|
||||||
|
removekeys_sub()
|
||||||
|
{
|
||||||
|
if [ -f $1 ]; then
|
||||||
|
KEY=`head -1 $1`
|
||||||
|
if [ -f $KEY.key ]; then
|
||||||
|
mv $KEY.key $KEY.private $KEYBACKUPDIR/
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
remove_previouskey()
|
||||||
|
{
|
||||||
|
if [ -f $ZSK_R_FILE ]; then
|
||||||
|
removekeys_sub $ZSK_R_FILE
|
||||||
|
mv $ZSK_R_FILE "$KEYBACKUPDIR/removed-ZSK-$NOW-$ZONE"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
if [ "$1" = "" -o "$1" = "-h" -o "$1" = "-?" -o "$1" = "--help" ]; then
|
||||||
|
_usage
|
||||||
|
exit 0
|
||||||
|
elif [ "$1" = "-s" -o "$1" = "--sign" ];then
|
||||||
|
SIGN_OPT=1
|
||||||
|
shift
|
||||||
|
fi
|
||||||
|
|
||||||
|
CMD="$1"
|
||||||
|
shift
|
||||||
|
|
||||||
|
if [ "$1" = "" ]; then
|
||||||
|
Fatal "A zone must be provided."
|
||||||
|
else
|
||||||
|
ZONELIST="$*"
|
||||||
|
fi
|
||||||
|
|
||||||
|
for ZONE in $ZONELIST
|
||||||
|
do
|
||||||
|
LOCKF="$ZONE.lock"
|
||||||
|
TMPF="$ZONE.$$"
|
||||||
|
KSK_FILE="$HEAD_KSKNAME$ZONE"
|
||||||
|
ZSK_FILE="$HEAD_ZSKNAME$ZONE"
|
||||||
|
KSK_S_FILE="$HEAD_KSSNAME$ZONE"
|
||||||
|
ZSK_S_FILE="$HEAD_ZSSNAME$ZONE"
|
||||||
|
ZSK_R_FILE="$HEAD_ZSRNAME$ZONE"
|
||||||
|
DNSRECORD_FILE="$DNSRECORDDIR/$ZONE"
|
||||||
|
ZONE_=`echo $ZONE | tr .- __`
|
||||||
|
eval _KSK_PARAM=\${KSK_PARAM_$ZONE_:-$KSK_PARAM}
|
||||||
|
eval _ZSK_PARAM=\${ZSK_PARAM_$ZONE_:-$ZSK_PARAM}
|
||||||
|
eval _DNSRECORD_PARAM=\${DNSRECORD_PARAM_$ZONE_:-$DNSRECORD_PARAM}
|
||||||
|
|
||||||
|
echo "LOCK$$" > $TMPF
|
||||||
|
LOCKSTR=`cat $TMPF`
|
||||||
|
if [ ! -f $TMPF -o "LOCK$$" != "$LOCKSTR" ]; then
|
||||||
|
Fatal "cannot write lock file $TMPF"
|
||||||
|
fi
|
||||||
|
if ln $TMPF $LOCKF; then
|
||||||
|
:
|
||||||
|
else
|
||||||
|
rm $TMPF
|
||||||
|
echo "zone $ZONE locked"
|
||||||
|
continue
|
||||||
|
fi
|
||||||
|
rm $TMPF
|
||||||
|
case $CMD in
|
||||||
|
keygen)
|
||||||
|
_check_nofile $KSK_FILE $ZSK_FILE
|
||||||
|
keygensub "$_KSK_PARAM" $ZONE $KSK_FILE
|
||||||
|
keygensub "$_ZSK_PARAM" $ZONE $ZSK_FILE
|
||||||
|
status
|
||||||
|
;;
|
||||||
|
rmkeys)
|
||||||
|
removekeys_sub $KSK_FILE
|
||||||
|
removekeys_sub $ZSK_FILE
|
||||||
|
removekeys_sub $KSK_S_FILE
|
||||||
|
removekeys_sub $ZSK_S_FILE
|
||||||
|
rm $KSK_FILE $ZSK_FILE $KSK_S_FILE $ZSK_S_FILE
|
||||||
|
status
|
||||||
|
;;
|
||||||
|
ksk-add)
|
||||||
|
_check_nofile $KSK_S_FILE
|
||||||
|
keygensub "$_KSK_PARAM" $ZONE $KSK_S_FILE
|
||||||
|
status
|
||||||
|
;;
|
||||||
|
ksk-roll)
|
||||||
|
_check_file $KSK_FILE $KSK_S_FILE
|
||||||
|
KSK=`head -1 $KSK_FILE`
|
||||||
|
KSS=`head -1 $KSK_S_FILE`
|
||||||
|
_check_file $KSK.key $KSS.key $KSK.private $KSS.private
|
||||||
|
mv $KSK.key $KSK.private $KEYBACKUPDIR/
|
||||||
|
mv $KSK_S_FILE $KSK_FILE
|
||||||
|
OLDKSK="$KSK"
|
||||||
|
KSK="$KSS"
|
||||||
|
KSS=""
|
||||||
|
echo "$ZONE 's KSK: valid -> removed: $OLDKSK"
|
||||||
|
echo "$ZONE 's KSK: next -> current: $KSK"
|
||||||
|
status
|
||||||
|
;;
|
||||||
|
zsk-add)
|
||||||
|
_check_nofile $ZSK_S_FILE
|
||||||
|
keygensub "$_ZSK_PARAM" $ZONE $ZSK_S_FILE
|
||||||
|
status
|
||||||
|
;;
|
||||||
|
zsk-roll)
|
||||||
|
_check_file $ZSK_FILE $ZSK_S_FILE
|
||||||
|
ZSK=`head -1 $ZSK_FILE`
|
||||||
|
ZSS=`head -1 $ZSK_S_FILE`
|
||||||
|
_check_file $ZSK.key $ZSS.key $ZSK.private $ZSS.private
|
||||||
|
remove_previouskey
|
||||||
|
mv $ZSK_FILE $ZSK_R_FILE
|
||||||
|
mv $ZSK_S_FILE $ZSK_FILE
|
||||||
|
OLDZSK="$ZSK"
|
||||||
|
ZSK="$ZSS"
|
||||||
|
ZSS=""
|
||||||
|
echo "$ZONE 's ZSK: valid -> previous: $OLDZSK"
|
||||||
|
echo "$ZONE 's ZSK: next -> current: $ZSK"
|
||||||
|
status
|
||||||
|
;;
|
||||||
|
zsk-rmold)
|
||||||
|
_check_file $ZSK_R_FILE
|
||||||
|
remove_previouskey
|
||||||
|
status
|
||||||
|
;;
|
||||||
|
sign)
|
||||||
|
sign
|
||||||
|
;;
|
||||||
|
status)
|
||||||
|
status
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "unknown command: $CMD"
|
||||||
|
_usage
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
rm $LOCKF
|
||||||
|
done
|
||||||
|
|
||||||
|
[ "$SIGN_OPT" = 1 ] && sign
|
||||||
|
exit 0
|
||||||
71
aech/motd.sh
Normal file
71
aech/motd.sh
Normal file
|
|
@ -0,0 +1,71 @@
|
||||||
|
##!/bin/bash
|
||||||
|
# MOTD script
|
||||||
|
|
||||||
|
# Variables
|
||||||
|
user=$USER
|
||||||
|
path=$PWD
|
||||||
|
home=$HOME
|
||||||
|
|
||||||
|
# Calculate last login
|
||||||
|
lastlog=$(lastlog -u $user | tail -n 1)
|
||||||
|
ll[0]=$(echo $lastlog | awk '{print $4}')
|
||||||
|
ll[1]=$(echo $lastlog | awk '{print $5}')
|
||||||
|
ll[2]=$(echo $lastlog | awk '{print $6}')
|
||||||
|
ll[3]=$(echo $lastlog | awk '{print $7}')
|
||||||
|
ll[4]=$(echo $lastlog | awk '{print $3}')
|
||||||
|
|
||||||
|
# Calculate current system uptime
|
||||||
|
uptime=$(uptime -p|cut -c 4-)
|
||||||
|
upsince=$(uptime -s)
|
||||||
|
|
||||||
|
# Calculate usage of disk
|
||||||
|
usage=$(df -h / | head -n 2 | tail -n 1 | awk '{print $3}')
|
||||||
|
usageTotal=$(df -h / | head -n 2 | tail -n 1 | awk '{print $2}')
|
||||||
|
|
||||||
|
# Calculate SSH logins
|
||||||
|
logins=$(w -s|head -n1|awk '{print $6}')
|
||||||
|
|
||||||
|
# Calculate processes
|
||||||
|
psa=$(($(ps -A h | wc -l)-2))
|
||||||
|
|
||||||
|
# Calculate current system load
|
||||||
|
loadavg=$(cat /proc/loadavg)
|
||||||
|
sysload[1]=$(echo $loadavg|awk '{print $1}')
|
||||||
|
sysload[5]=$(echo $loadavg|awk '{print $2}')
|
||||||
|
sysload[15]=$(echo $loadavg|awk '{print $3}')
|
||||||
|
|
||||||
|
# Calculate Memory
|
||||||
|
memory=$(free -mh|head -n2|tail -n1)
|
||||||
|
memT=$(echo $memory|awk '{print $2}')
|
||||||
|
memU=$(echo $memory|awk '{print $3}')
|
||||||
|
memF=$(echo $memory|awk '{print $4}')
|
||||||
|
memC=$(echo $memory|awk '{print $6}')
|
||||||
|
memory=$(free -mh|tail -n1)
|
||||||
|
memS=$(echo $memory|awk '{print $3}')
|
||||||
|
|
||||||
|
# ASCII head
|
||||||
|
head=$(cat <<EOF
|
||||||
|
|
||||||
|
, ,
|
||||||
|
'"\_ ,/",
|
||||||
|
\.'\_ ,/ ,/ /) /) , /)
|
||||||
|
\.'\_ ,/ ,/ _ __ // // __ _(/ _____
|
||||||
|
\.'\__/ ,/ (_/_/ (_(_/_/(_/(__(_/ (_(_(_(_)/ (_
|
||||||
|
\{00}/ .-/ .-/ /) /)
|
||||||
|
\ / (_/ (_/ (/ (/
|
||||||
|
+==""==+
|
||||||
|
|
||||||
|
<<< ${user}@$(hostname) >>>
|
||||||
|
|
||||||
|
EOF
|
||||||
|
)
|
||||||
|
|
||||||
|
# Print Output
|
||||||
|
echo -e "\033[01;32m$head\033[0m"
|
||||||
|
echo -e " \033[35mLast Login....:\033[0m \033[36m${ll[1]} ${ll[2]} ${ll[3]} from ${ll[4]}\033[0m \033[33m${ll[5]}\033[0m"
|
||||||
|
echo -e " \033[35mUptime........:\033[0m \033[36m$uptime (since $upsince)\033[0m"
|
||||||
|
echo -e " \033[35mLoad..........:\033[0m \033[36m${sysload[1]} (1minute) ${sysload[5]} (5minutes) ${sysload[15]} (15minutes)\033[0m"
|
||||||
|
echo -e " \033[35mMemory MB.....:\033[0m \033[36m$memT Used: $memU Free: $memF Free Cached: $memC Swap Used: $memS\033[0m"
|
||||||
|
echo -e " \033[35mDisk Usage....:\033[0m \033[36m$usage out of $usageTotal\033[0m"
|
||||||
|
echo -e " \033[35mSSH Logins....:\033[0m \033[36mThere are currently $logins active sessions\033[0m"
|
||||||
|
echo -e " \033[35mProcesses.....:\033[0m \033[36m$psa total running\033[0m\n"
|
||||||
3
aech/nsec3signing.sh
Normal file
3
aech/nsec3signing.sh
Normal file
|
|
@ -0,0 +1,3 @@
|
||||||
|
#!/bin/bash
|
||||||
|
rndc signing -nsec3param 1 0 10 auto strobeto.de
|
||||||
|
rndc signing -nsec3param 1 0 10 auto strobeltobias.de
|
||||||
4
aech/update-nc-apps.sh
Normal file
4
aech/update-nc-apps.sh
Normal file
|
|
@ -0,0 +1,4 @@
|
||||||
|
#!/bin/sh
|
||||||
|
# Fix: The input device is not a tty
|
||||||
|
#export COMPOSE_INTERACTIVE_NO_CLI=1
|
||||||
|
/usr/bin/docker exec --user 33 nextcloud-space php occ app:update --all
|
||||||
10
aech/upgrade-docker-compose.sh
Normal file
10
aech/upgrade-docker-compose.sh
Normal file
|
|
@ -0,0 +1,10 @@
|
||||||
|
#!/bin/bash
|
||||||
|
echo "Downloading latest version of docker-compose..."
|
||||||
|
curl -L https://github.com/docker/compose/releases/download/$(curl -Ls https://www.servercow.de/docker-compose/latest.php)/docker-compose-$(uname -s)-$(uname -m) > /usr/local/bin/docker-compose
|
||||||
|
|
||||||
|
if [ $? -eq 0 ]; then
|
||||||
|
chmod +x /usr/local/bin/docker-compose
|
||||||
|
else
|
||||||
|
echo "Upgrade failed!"
|
||||||
|
fi
|
||||||
|
|
||||||
Loading…
Reference in a new issue