wcp/bin/v-add-web-domain-httpauth at ad58d6de3c57fe31cb154515795820c1a2dcfac8 · ghzhost/wcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
#!/bin/bash
# info: add password protection for web domain
# options: USER DOMAIN AUTH_USER AUTH_PASSWORD [RESTART]
# labels: web
#
# example: v-add-web-domain-httpauth admin acme.com user02 super_pass
#
# The call is used for securing web domain with http auth


#----------------------------------------------------------#
#                    Variable&Function                     #
#----------------------------------------------------------#

# Argument definition
user=$1
domain=$2
auth_user=$3
password=$4; HIDE=4
restart=${5-yes}

# Includes
source $HESTIA/func/main.sh
source $HESTIA/func/domain.sh
source $HESTIA/conf/hestia.conf

# Defining htpasswd file
htaccess="$HOMEDIR/$user/conf/web/$domain/htaccess"
htpasswd="$HOMEDIR/$user/conf/web/$domain/htpasswd"
shtaccess="$htaccess"
shtpasswd="$htpasswd"
docroot="$HOMEDIR/$user/web/$domain/public_html"

# Perform verification if read-only mode is enabled
check_hestia_demo_mode
#----------------------------------------------------------#
#                    Verifications                         #
#----------------------------------------------------------#

check_args '4' "$#" 'USER DOMAIN AUTH_USER AUTH_PASSWORD [RESTART]'
is_format_valid 'user' 'domain'
is_system_enabled "$WEB_SYSTEM" 'WEB_SYSTEM'
is_object_valid 'user' 'USER' "$user"
is_object_unsuspended 'user' 'USER' "$user"
is_object_valid 'web' 'DOMAIN' "$domain"
is_object_unsuspended 'web' 'DOMAIN' "$domain"
is_password_valid
get_domain_values 'web'
if [ ! -z "$(echo "$AUTH_USER" |tr : '\n' |grep ^$auth_user$)" ]; then
    echo "Error: auth user $auth_user already exists"
    log_event "$E_EXISTS" "$ARGUMENTS"
    exit $E_EXISTS
fi


#----------------------------------------------------------#
#                       Action                             #
#----------------------------------------------------------#

# Adding htaccess password protection
if [ ! -e "$htaccess" ]; then
    if [ "$WEB_SYSTEM" != 'nginx' ]; then
        echo "<Directory $docroot>" > $htaccess
        echo "    AuthUserFile $htpasswd" >> $htaccess
        echo "    AuthName \"$domain access\"" >> $htaccess
        echo "    AuthType Basic" >> $htaccess
        echo "    Require valid-user" >> $htaccess
        echo "</Directory>" >> $htaccess
    else
        echo "auth_basic  \"$domain password access\";" > $htaccess
        echo "auth_basic_user_file    $htpasswd;" >> $htaccess
    fi
    restart_required='yes'
fi

# Adding httpasswd user
auth_hash=$($BIN/v-generate-password-hash htpasswd htpasswd $password)
touch $htpasswd
chmod 640 $htpasswd $htaccess
chgrp $user $htpasswd $htaccess
sed -i "/^$auth_user:/d" $htpasswd
echo "$auth_user:$auth_hash" >> $htpasswd

# Symbolic link for secure web templates
if [ ! -L $shtpasswd ]; then
    ln -s $htpasswd $shtpasswd
fi
if [ ! -L $shtaccess ]; then
    ln -s $htaccess $shtaccess
fi

# Restarting web server
if [ "$restart" != 'no' ] && [ "$restart_required" = 'yes' ]; then
    $BIN/v-restart-web
fi

#----------------------------------------------------------#
#                       Hestia                             #
#----------------------------------------------------------#

# Preparing web.conf keys
if [ ! -z "$AUTH_USER" ]; then
    auth_user="$AUTH_USER:$auth_user"
    auth_hash="$AUTH_HASH:$auth_hash"
else
    # Adding new key into web.conf
    add_object_key "web" 'DOMAIN' "$domain" 'AUTH_USER' 'U_DISK'
    add_object_key "web" 'DOMAIN' "$domain" 'AUTH_HASH' 'U_DISK'
fi

# Updating config
update_object_value 'web' 'DOMAIN' "$domain" '$AUTH_USER' "$auth_user"
update_object_value 'web' 'DOMAIN' "$domain" '$AUTH_HASH' "$auth_hash"

# Logging
log_history "added http auth user $httpauth_user on $domain"
log_event "$OK" "$ARGUMENTS"

exit