Compare commits
7 Commits
f082adf206
...
4f00bccbe5
| Author | SHA1 | Date | |
|---|---|---|---|
| 4f00bccbe5 | |||
| 146c6fb1b1 | |||
| bb253b3700 | |||
| 0f53834083 | |||
| 9b1f96ba81 | |||
| efae942441 | |||
| 8026ba05fe |
161
add_user.sh
161
add_user.sh
@@ -2,51 +2,51 @@
|
|||||||
# Usage: add_user.sh <login>
|
# Usage: add_user.sh <login>
|
||||||
set -e
|
set -e
|
||||||
|
|
||||||
source /root/helpers/.env
|
. /root/helpers/.env
|
||||||
|
|
||||||
LOGIN="$1"
|
LOGIN="$1"
|
||||||
[ -z "$LOGIN" ] && { echo "Użycie: $0 <login>"; exit 1; }
|
[ -z "$LOGIN" ] && { echo "Użycie: $0 <login>"; exit 1; }
|
||||||
|
|
||||||
# 1. Użytkownik i hasło
|
setup_user() {
|
||||||
PASS="$(openssl rand -base64 16 | sed 's/[\/\+\=\\]//g')"
|
adduser -D -s /bin/sh -h "/home/$LOGIN" -H "$LOGIN"
|
||||||
adduser -D -s /bin/sh -h /home/$LOGIN -H "$LOGIN"
|
addgroup "$LOGIN" tildeusers
|
||||||
echo "$LOGIN:$PASS" | chpasswd
|
|
||||||
addgroup $LOGIN tildeusers
|
PASS="$(openssl rand -base64 16 | sed 's/[\/\+\=\\]//g')"
|
||||||
|
echo "$LOGIN":"$PASS" | chpasswd
|
||||||
|
|
||||||
|
zfs create -o mountpoint="/home/$LOGIN" -o quota=200M "tank/ROOT/homes/$LOGIN"
|
||||||
|
chown "$LOGIN":"$LOGIN" "/home/$LOGIN"
|
||||||
|
|
||||||
# 2. Dataset ZFS (quota 200 MB)
|
# neomutt had issues with default vi
|
||||||
zfs create -o mountpoint=/home/$LOGIN -o quota=200M tank/ROOT/homes/$LOGIN
|
cat "export EDITOR=nvim" >> "/home/$LOGIN/.ashrc"
|
||||||
chown $LOGIN:$LOGIN /home/$LOGIN
|
|
||||||
cat "export EDITOR=nvim" >> /home/$LOGIN/.ashrc
|
|
||||||
|
|
||||||
mkdir -p /home/$LOGIN/Maildir/Inbox/cur
|
# set cgroup
|
||||||
mkdir -p /home/$LOGIN/Maildir/Inbox/new
|
CG_ROOT=/sys/fs/cgroup/users
|
||||||
mkdir -p /home/$LOGIN/Maildir/Inbox/tmp
|
mkdir -p "$CG_ROOT"
|
||||||
|
# upewnij się, że kontrolery włączone w parent „users”
|
||||||
|
echo "+cpu +memory" > "$CG_ROOT/cgroup.subtree_control" 2>/dev/null || true
|
||||||
|
|
||||||
|
USER_CG="$CG_ROOT/$LOGIN"
|
||||||
|
mkdir "$USER_CG"
|
||||||
|
|
||||||
|
# set default folders for ssh & gnu and set them private
|
||||||
|
mkdir -m 0700 "/home/$LOGIN/.ssh"
|
||||||
|
mkdir -m 0700 "/home/$LOGIN/.gnupg"
|
||||||
|
}
|
||||||
|
|
||||||
mkdir -p /home/$LOGIN/Maildir/Sent/cur
|
setup_neomutt () {
|
||||||
mkdir -p /home/$LOGIN/Maildir/Sent/new
|
for dir in "Inbox" "Sent" "Drafts" "Trash"; do
|
||||||
mkdir -p /home/$LOGIN/Maildir/Sent/tmp
|
for subdir in "cur" "new" "tmp"; do
|
||||||
|
mkdir -p "/home/$LOGIN/Maildir/$dir/$subdir"
|
||||||
|
done
|
||||||
|
done
|
||||||
|
|
||||||
mkdir -p /home/$LOGIN/Maildir/Drafts/cur
|
chmod -R 0700 /home/"$LOGIN"/Maildir
|
||||||
mkdir -p /home/$LOGIN/Maildir/Drafts/new
|
}
|
||||||
mkdir -p /home/$LOGIN/Maildir/Drafts/tmp
|
|
||||||
|
|
||||||
mkdir -p /home/$LOGIN/Maildir/Trash/cur
|
setup_tmux () {
|
||||||
mkdir -p /home/$LOGIN/Maildir/Trash/new
|
mkdir -p "/home/$LOGIN/.config/tmux"
|
||||||
mkdir -p /home/$LOGIN/Maildir/Trash/tmp
|
cat << EOF > "/home/$LOGIN/.config/tmux/tmux.conf"
|
||||||
|
|
||||||
chmod -R 0700 /home/$LOGIN/Maildir
|
|
||||||
|
|
||||||
cp -r /root/helpers/public_html /home/$LOGIN/
|
|
||||||
sed -i "s/<<USER>>/$LOGIN/g" /home/$LOGIN/public_html/index.php
|
|
||||||
sed -i "s/<<USER>>/$LOGIN/g" /home/$LOGIN/public_html/parts/header.php
|
|
||||||
sed -i "s/<<USER>>/$LOGIN/g" /home/$LOGIN/public_html/blog/index.php
|
|
||||||
|
|
||||||
mkdir -p /home/$LOGIN/.config/weechat/
|
|
||||||
|
|
||||||
cp /root/helpers/irc.conf /home/$LOGIN/.config/weechat
|
|
||||||
|
|
||||||
mkdir -p /home/$LOGIN/.config/tmux
|
|
||||||
cat << EOF > /home/$LOGIN/.config/tmux/tmux.conf
|
|
||||||
set -g mouse on
|
set -g mouse on
|
||||||
setw -g mode-keys vi
|
setw -g mode-keys vi
|
||||||
bind -n F1 select-window -t 0
|
bind -n F1 select-window -t 0
|
||||||
@@ -65,52 +65,79 @@ set-hook -g client-attached "send-keys -t main:2 '/usr/local/bin/tylda-motd.sh'
|
|||||||
|
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
cat << EOF > /home/$LOGIN/.profile
|
cat << EOF > "/home/$LOGIN/.profile"
|
||||||
if [ -z "\$TMUX" ]; then
|
if [ -z "\$TMUX" ]; then
|
||||||
exec tmux attach -t main || exec tmux new -s main
|
exec tmux attach -t main || exec tmux new -s main
|
||||||
fi
|
fi
|
||||||
EOF
|
EOF
|
||||||
|
}
|
||||||
|
|
||||||
|
setup_gemini () {
|
||||||
# 3. Cgroup v2
|
gmi="/home/$LOGIN/public_gemini/"
|
||||||
CG_ROOT=/sys/fs/cgroup/users
|
mkdir -p "$gmi"
|
||||||
mkdir -p "$CG_ROOT"
|
ln -s "$gmi" "/srv/gemini/~$LOGIN"
|
||||||
# upewnij się, że kontrolery włączone w parent „users”
|
|
||||||
echo "+cpu +memory" > "$CG_ROOT/cgroup.subtree_control" 2>/dev/null || true
|
cat <<EOF > "$gmi/index.gmi"
|
||||||
|
|
||||||
USER_CG="$CG_ROOT/$LOGIN"
|
|
||||||
mkdir "$USER_CG"
|
|
||||||
|
|
||||||
# gemini
|
|
||||||
gmi="/home/$LOGIN/public_gemini/"
|
|
||||||
mkdir -p $gmi
|
|
||||||
ln -s $gmi /srv/gemini/~$LOGIN
|
|
||||||
|
|
||||||
cat <<EOF > $gmi/index.gmi
|
|
||||||
# $LOGIN
|
# $LOGIN
|
||||||
EOF
|
EOF
|
||||||
# end gemini
|
}
|
||||||
|
|
||||||
mkdir -p /home/$LOGIN/.ssh
|
setup_html () {
|
||||||
mkdir -p /home/$LOGIN/.gnupg
|
cp -r /root/helpers/public_html "/home/$LOGIN/"
|
||||||
touch /home/$LOGIN/public_html/.webring
|
sed -i "s/<<USER>>/$LOGIN/g" "/home/$LOGIN/"public_html/index.php
|
||||||
|
sed -i "s/<<USER>>/$LOGIN/g" "/home/$LOGIN/"public_html/parts/header.php
|
||||||
|
sed -i "s/<<USER>>/$LOGIN/g" "/home/$LOGIN/"public_html/blog/index.php
|
||||||
|
|
||||||
chmod 0700 /home/$LOGIN/.ssh
|
touch "/home/$LOGIN/public_html/.webring"
|
||||||
chmod 0700 /home/$LOGIN/.gnupg
|
}
|
||||||
|
|
||||||
chown -R $LOGIN:$LOGIN /home/$LOGIN/
|
setup_nextcloud () {
|
||||||
|
curl -X POST https://cloud.tylda.org/ocs/v1.php/cloud/users \
|
||||||
|
-d userid="$LOGIN" \
|
||||||
|
-d password="$PASS" \
|
||||||
|
-H "OCS-APIRequest: true" \
|
||||||
|
-u "$NEXTCLOUD_USER:$NEXTCLOUD_PASS"
|
||||||
|
|
||||||
curl -X POST https://cloud.tylda.org/ocs/v1.php/cloud/users -d userid="$LOGIN" -d password="$PASS" -H "OCS-APIRequest: true" -u "$NEXTCLOUD_USER:$NEXTCLOUD_PASS"
|
curl -X PUT "https://cloud.tylda.org/ocs/v1.php/cloud/users/$LOGIN" \
|
||||||
curl -X PUT "https://cloud.tylda.org/ocs/v1.php/cloud/users/$LOGIN" -H "OCS-APIRequest: true" -u "$NEXTCLOUD_USER:$NEXTCLOUD_PASS" -d key="quota" -d value="250MB"
|
-H "OCS-APIRequest: true" \
|
||||||
|
-u "$NEXTCLOUD_USER:$NEXTCLOUD_PASS" \
|
||||||
|
-d key="quota" \
|
||||||
|
-d value="250MB"
|
||||||
|
}
|
||||||
|
|
||||||
cp welcome_tmp.txt welcome.txt
|
setup_weechat () {
|
||||||
|
mkdir -p "/home/$LOGIN/.config/weechat/"
|
||||||
|
cp /root/helpers/irc.conf "/home/$LOGIN/.config/weechat"
|
||||||
|
}
|
||||||
|
|
||||||
echo "Login: $LOGIN" >> welcome.txt
|
send_welcome_mail () {
|
||||||
echo "Hasło: $PASS" >> welcome.txt
|
sendmail -f v0id1st@tylda.org "$LOGIN@tylda.org" << EOF
|
||||||
|
Subject: Witaj na tylda.org!
|
||||||
|
From: v0id1st@tylda.org
|
||||||
|
|
||||||
sendmail -f v0id1st@tylda.org $LOGIN@tylda.org < welcome.txt
|
Siemano :D
|
||||||
|
Witaj na tyldzie, baw się dobrze! Wpadnij się przywitać na IRCa.
|
||||||
|
|
||||||
rm -f welcome.txt
|
Twoje dane do Nextcloud to (https://cloud.tylda.org) to:
|
||||||
|
Login: $LOGIN
|
||||||
|
Hasło: $PASS
|
||||||
|
EOF
|
||||||
|
}
|
||||||
|
|
||||||
|
# critical path
|
||||||
|
setup_user
|
||||||
|
setup_nextcloud
|
||||||
|
send_welcome_mail
|
||||||
|
|
||||||
|
# less important stuff
|
||||||
|
# shouldn't impact user obtaining registration email
|
||||||
|
setup_neomutt
|
||||||
|
setup_tmux
|
||||||
|
setup_gemini
|
||||||
|
setup_html
|
||||||
|
setup_weechat
|
||||||
|
|
||||||
|
chown -R "$LOGIN":"$LOGIN" "/home/$LOGIN/"
|
||||||
|
|
||||||
echo 524288000 > "$USER_CG/memory.max" # 500 MB RAM
|
echo 524288000 > "$USER_CG/memory.max" # 500 MB RAM
|
||||||
echo "50000 100000" > "$USER_CG/cpu.max" # 50 % CPU (quota/period μs)
|
echo "50000 100000" > "$USER_CG/cpu.max" # 50 % CPU (quota/period μs)
|
||||||
|
|||||||
Reference in New Issue
Block a user