Daniel unbrot Pätzold
a237f58813
For customer setups, the software repository was split into client_software and client_software_cust. Obsoleted sync for client_software.
115 lines
4.9 KiB
Plaintext
115 lines
4.9 KiB
Plaintext
# Include for System Settings
|
|
# SPDX-FileCopyrightText: Daniel Pätzold
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
#
|
|
export TLDOMAIN=domain.tld
|
|
export DOMAIN=clients.${TLDOMAIN}
|
|
export SERVERFQDN_IPA=ipa.${TLDOMAIN} # Needs to be the IPA- Server
|
|
export SERVERFQDN_NC=nextcloud.${TLDOMAIN}
|
|
export INSTALLDOCS="https://gitea.dtext.online/obel1x/fedora-OEMDRV/src/branch/main/README.md"
|
|
|
|
#If the REPO_URL and REPO_BRANCH is set, this script collection will do automatic upgrades
|
|
export REPO_URL="https://gitea.dtext.online/obel1x/fedora-OEMDRV.git"
|
|
export REPO_BRANCH="main"
|
|
|
|
#Configuration Files - maybe syned with your companies settings
|
|
export SYSCONFIGPATH="/opt/sys_config"
|
|
export DISTCONFIGPATH="/opt/sys_config/config"
|
|
export DISTCONFIGPATH_SRC="/Shared/sw_geteilt/client_settings"
|
|
|
|
#Group, that will have sudo rights on the client
|
|
export CLIENTADMINGROUP="clientadmins"
|
|
|
|
# Method to determine Unique Hostname / FQDN of the Client. May be replaced by your needs
|
|
# MACHINEID should be set by install.sh. The Determination is done by setup_system.inc.sh as root for old installs.
|
|
if [ -z ${MACHINEID} ]; then
|
|
#Fallback if not configured, should only be needed once for very old installations
|
|
export HOSTNM=$( hostname -s )
|
|
else
|
|
export HOSTNM="pc-${MACHINEID}"
|
|
fi
|
|
export FQDN=${HOSTNM}.${DOMAIN}
|
|
|
|
#Additional Client-Software- Repository-Folder in Nextcloud (Shared Folder / Systemwide)
|
|
export CLIENT_SOFTWARE_CUST_DST="${SYSCONFIGPATH}/client_software_cust" # Required. Must not be changed!
|
|
export CLIENT_SOFTWARE_CUST_SRC="/Shared/sw_geteilt/client_software_cust" # Set to the Nextcloud directory where the software should come from
|
|
|
|
# OBSOLETE / OLD Variables for packaged files under client_software. Those files will not be synced to NC any more!
|
|
# if still set, they will cause sync to complain about it
|
|
unset CLIENT_SOFTWARE_DST
|
|
unset CLIENT_SOFTWARE_SRC
|
|
|
|
#Secure File Encryption
|
|
#Needs a running KRA- Service on FreeIPA
|
|
# Set to "true" to use Encryption via IPAVAULT - OTHERWISE YOUR FILES WILL NOT BE ENCRYPTED
|
|
export IPAVAULTUSE="true"
|
|
# Vaultname - can be any Name
|
|
export IPAVAULTNAME="CLIENT_FILEENCRYPTION_"${HOSTNM}
|
|
|
|
#Following settings are only available when run in Userspace
|
|
if [ "$EUID" -ne 0 ]; then
|
|
#This is the Path, that will be mapped from encryptet filesystem at logon - only available for users, not for root
|
|
export DECRYPTEDDATADIR="${HOME}/data" # Decrypted Dir to work for the User
|
|
export ENCRYPTEDDATADIR="${HOME}/.data" # Contains the encrypted Data
|
|
|
|
#Important Files
|
|
export DAVTOKENFILENAME="${DECRYPTEDDATADIR}/WEBDAVTOKEN"
|
|
|
|
#Optional: Sync Folders with nextcloud client
|
|
CLIENT_DATA_SYNC=() # Do not remove
|
|
|
|
# If you dont want to use Folder synchronisation: comment out each line starting with CLIENT_DATA_SYNC_LINE= or CLIENT_DATA_SYNC+=
|
|
#First Sync Folder
|
|
CLIENT_DATA_SYNC_LINE=("${DECRYPTEDDATADIR}/Dokumente" "/Documents")
|
|
CLIENT_DATA_SYNC+=("$(declare -p CLIENT_DATA_SYNC_LINE)") # Repeat for each CLIENT_DATA_SYNC_LINE
|
|
|
|
#Next Sync Folder
|
|
CLIENT_DATA_SYNC_LINE=("${DECRYPTEDDATADIR}/Bilder" "/Photos")
|
|
CLIENT_DATA_SYNC+=("$(declare -p CLIENT_DATA_SYNC_LINE)") # Repeat for each CLIENT_DATA_SYNC_LINE
|
|
|
|
#Next Sync Folder
|
|
#...
|
|
|
|
export CLIENT_DATA_SYNC_DECLARE="$(declare -p CLIENT_DATA_SYNC)" # Do not remove
|
|
#End of Sync Folder for nextcloud client
|
|
|
|
#Firefox Profiles
|
|
export PROFILE_FIREFOX_RESET_LOCAL="true" # Set this to wipe ~/.mozilla each time if you don't want users to setup their own firefox profile
|
|
# Optional: own Firefox profile used for this company if given as default
|
|
# You may use any tar file, that contains a valid firefox profile set up to your companies need.
|
|
# As example look at 0020_nextcloud_mozilla_pre/firefox.tar.zst
|
|
# You should put it under e.g SYSCONFIGPATH and than use the filepath relative. e.g. "${SYSCONFIGPATH}/firefox.tar.zst"
|
|
export PROFILE_FIREFOX_TAR_FILE=""
|
|
#Mozilla profile paths on Nextcloud Server. Syncs your profiles to Nextcloud.
|
|
export PROFILE_FIREFOX_SRC="mozilla_profiles/firefox"
|
|
export PROFILE_FIREFOX_DST="${DECRYPTEDDATADIR}/firefox"
|
|
|
|
#Thunderbird Profiles to also be synced
|
|
export PROFILE_TB_SRC="mozilla_profiles/thunderbird"
|
|
export PROFILE_TB_DST="${DECRYPTEDDATADIR}/thunderbird"
|
|
|
|
# Mail account auto-provisioning for DAVTOKEN_USER@TLDOMAIN in Thunderbird
|
|
export SERVERFQDN_IMAP="imap.${TLDOMAIN}" # IMAP server hostname (e.g. imap.strato.de)
|
|
fi
|
|
|
|
#Basic commons not needing change
|
|
export CDATEC8=$(date '+%Y%m%d') # Date 8 Characters long: YYYYMMDD
|
|
export CTIMEC6=$(date '+%H%M%S') # Time 6 Chars: HHMMSS
|
|
|
|
#Basic runtime-Vars
|
|
export EXECDIR=$(pwd)
|
|
export SCRIPTPATH="$( cd -- "$(dirname "$0")" >/dev/null 2>&1 ; pwd -P )"
|
|
if [ ${SCRIPTPATH::2} == "//" ]; then
|
|
export SCRIPTPATH=${SCRIPTPATH:1}
|
|
fi
|
|
export SCRIPTNAME=$(basename "$0")
|
|
|
|
#First run Service Name
|
|
export FIRSTRUN_SERVICENAME="setup-system.service"
|
|
export FIRSTRUN_SCRIPTPATH="/usr/lib/systemd/system"
|
|
|
|
# temp and log files
|
|
export TEMPDIR="${HOME}/temp/system_setup"
|
|
export LOGFILE="${TEMPDIR}/${SCRIPTNAME}.log"
|
|
mkdir -p ${TEMPDIR}
|