openship 0.4.5 → 0.4.7

package/dist/server/engine/dialog/optional_components.sh

@@ -0,0 +1,122 @@
+#!/usr/bin/env bash
+
+# Author:   Zhang Huangbin <zhb _at_ iredmail.org>
+
+#---------------------------------------------------------------------
+# This file is part of iRedMail, which is an open source mail server
+# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
+#
+# iRedMail is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# iRedMail is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
+#---------------------------------------------------------------------
+
+# ----------------------------------------
+# Optional components for special backend.
+# ----------------------------------------
+# Construct dialog menu list
+# Format: item_name item_descrition on/off
+# Note: item_descrition must be concatenated by '_'.
+export LIST_OF_OPTIONAL_COMPONENTS=''
+
+# Fail2ban
+export DIALOG_SELECTABLE_FAIL2BAN='YES'
+if [ X"${DISTRO}" == X'FREEBSD' ]; then
+    export DIALOG_SELECTABLE_FAIL2BAN='NO'
+fi
+
+# Web applications
+if [ X"${DISABLE_WEB_SERVER}" != X'YES' ]; then
+    . ${DIALOG_DIR}/web_applications.sh
+fi
+
+# iRedAdmin. Although it's a web application, but it's also able to run with
+# WSGI server instead of web server.
+LIST_OF_OPTIONAL_COMPONENTS="${LIST_OF_OPTIONAL_COMPONENTS} iRedAdmin Official_web-based_Admin_Panel on"
+
+# Fail2ban.
+if [ X"${DIALOG_SELECTABLE_FAIL2BAN}" == X'YES' ]; then
+    LIST_OF_OPTIONAL_COMPONENTS="${LIST_OF_OPTIONAL_COMPONENTS} Fail2ban Ban_IP_with_too_many_password_failures on"
+fi
+
+export tmp_config_optional_components="${ROOTDIR}/.optional_components"
+
+if echo ${LIST_OF_OPTIONAL_COMPONENTS} | grep 'o' &>/dev/null; then
+    ${DIALOG} \
+    --title "Optional components" \
+    --checklist "\
+* DKIM signing/verification and SPF validation are enabled by default.
+* DNS records for SPF and DKIM are required after installation.
+
+Refer to below file for more detail after installation:
+
+* ${TIP_FILE}
+" 20 76 6 \
+${LIST_OF_OPTIONAL_COMPONENTS} \
+2>${tmp_config_optional_components}
+
+    OPTIONAL_COMPONENTS="$(cat ${tmp_config_optional_components})"
+    rm -f ${tmp_config_optional_components} &>/dev/null
+fi
+
+if echo ${OPTIONAL_COMPONENTS} | grep -i 'iredadmin' &>/dev/null; then
+    export USE_IREDADMIN='YES'
+    echo "export USE_IREDADMIN='YES'" >> ${IREDMAIL_CONFIG_FILE}
+fi
+
+if echo ${OPTIONAL_COMPONENTS} | grep -i 'roundcubemail' &>/dev/null; then
+    export USE_ROUNDCUBE='YES'
+    echo "export USE_ROUNDCUBE='YES'" >> ${IREDMAIL_CONFIG_FILE}
+fi
+
+if echo ${OPTIONAL_COMPONENTS} | grep -i 'sogo' &>/dev/null; then
+    export USE_SOGO='YES'
+    echo "export USE_SOGO='YES'" >> ${IREDMAIL_CONFIG_FILE}
+fi
+
+if echo ${OPTIONAL_COMPONENTS} | grep -i 'netdata' &>/dev/null; then
+    export USE_NETDATA='YES'
+    echo "export USE_NETDATA='YES'" >>${IREDMAIL_CONFIG_FILE}
+fi
+
+if echo ${OPTIONAL_COMPONENTS} | grep -i 'fail2ban' &>/dev/null; then
+    export USE_FAIL2BAN='YES'
+    echo "export USE_FAIL2BAN='YES'" >>${IREDMAIL_CONFIG_FILE}
+fi
+
+export random_pw="$(${RANDOM_STRING})"
+export AMAVISD_DB_PASSWD="${AMAVISD_DB_PASSWD:=${random_pw}}"
+echo "export AMAVISD_DB_PASSWD='${AMAVISD_DB_PASSWD}'" >> ${IREDMAIL_CONFIG_FILE}
+
+export random_pw="$(${RANDOM_STRING})"
+export IREDADMIN_DB_PASSWD="${IREDADMIN_DB_PASSWD:=${random_pw}}"
+echo "export IREDADMIN_DB_PASSWD='${IREDADMIN_DB_PASSWD}'" >> ${IREDMAIL_CONFIG_FILE}
+
+export random_pw="$(${RANDOM_STRING})"
+export RCM_DB_PASSWD="${RCM_DB_PASSWD:=${random_pw}}"
+echo "export RCM_DB_PASSWD='${RCM_DB_PASSWD}'" >> ${IREDMAIL_CONFIG_FILE}
+
+export random_pw="$(${RANDOM_STRING})"
+export SOGO_DB_PASSWD="${SOGO_DB_PASSWD:=${random_pw}}"
+echo "export SOGO_DB_PASSWD='${SOGO_DB_PASSWD}'" >> ${IREDMAIL_CONFIG_FILE}
+
+export random_pw="$(${RANDOM_STRING})"
+export SOGO_SIEVE_MASTER_PASSWD="${SOGO_SIEVE_MASTER_PASSWD:=${random_pw}}"
+echo "export SOGO_SIEVE_MASTER_PASSWD='${SOGO_SIEVE_MASTER_PASSWD}'" >> ${IREDMAIL_CONFIG_FILE}
+
+export random_pw="$(${RANDOM_STRING})"
+export IREDAPD_DB_PASSWD="${IREDAPD_DB_PASSWD:=${random_pw}}"
+echo "export IREDAPD_DB_PASSWD='${IREDAPD_DB_PASSWD}'" >> ${IREDMAIL_CONFIG_FILE}
+
+export random_pw="$(${RANDOM_STRING})"
+export FAIL2BAN_DB_PASSWD="${FAIL2BAN_DB_PASSWD:=${random_pw}}"
+echo "export FAIL2BAN_DB_PASSWD='${FAIL2BAN_DB_PASSWD}'" >> ${IREDMAIL_CONFIG_FILE}

package/dist/server/engine/dialog/pgsql_config.sh

@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+
+# Author:   Zhang Huangbin <zhb _at_ iredmail.org>
+
+#---------------------------------------------------------------------
+# This file is part of iRedMail, which is an open source mail server
+# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
+#
+# iRedMail is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# iRedMail is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
+#---------------------------------------------------------------------
+
+# --------------------------------------------------
+# --------------------- MySQL ----------------------
+# --------------------------------------------------
+
+. ${CONF_DIR}/postgresql
+
+# Root password.
+while : ; do
+    ${DIALOG} \
+    --title "Password for PostgreSQL administrator: ${PGSQL_ROOT_USER}" \
+    --passwordbox "\
+Please specify password for PostgreSQL administrator: ${PGSQL_ROOT_USER}
+
+WARNING:
+
+* Do *NOT* use special characters in password right now. e.g. $, #, @, space.
+* EMPTY password is *NOT* permitted.
+* Sample password: $(${RANDOM_STRING})
+" 20 76 2>${RUNTIME_DIR}/.pgsql_rootpw
+
+    PGSQL_ROOT_PASSWD="$(cat ${RUNTIME_DIR}/.pgsql_rootpw)"
+
+    # Check $, #, space
+    echo ${PGSQL_ROOT_PASSWD} | grep '[\$\#\ ]' &>/dev/null
+    [ X"$?" != X'0' -a X"${PGSQL_ROOT_PASSWD}" != X'' ] && break
+done
+
+export PGSQL_ROOT_PASSWD="${PGSQL_ROOT_PASSWD}"
+echo "export PGSQL_ROOT_PASSWD='${PGSQL_ROOT_PASSWD}'" >>${IREDMAIL_CONFIG_FILE}
+rm -f ${RUNTIME_DIR}/.pgsql_rootpw

package/dist/server/engine/dialog/virtual_domain_config.sh

@@ -0,0 +1,94 @@
+#!/usr/bin/env bash
+
+# Author:   Zhang Huangbin <zhb _at_ iredmail.org>
+
+#---------------------------------------------------------------------
+# This file is part of iRedMail, which is an open source mail server
+# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
+#
+# iRedMail is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# iRedMail is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
+#---------------------------------------------------------------------
+
+# First domain name.
+while : ; do
+    ${DIALOG} \
+    --title "Your first mail domain name" \
+    --inputbox "\
+Please specify your first mail domain name.
+
+EXAMPLE:
+
+* example.com
+
+WARNING:
+
+It can *NOT* be the same as server hostname: ${HOSTNAME}.
+
+We need Postfix to accept emails sent to system accounts (e.g. root), if your mail domain is same as server hostname, Postfix won't accept any email sent to this mail domain.
+" 20 76 2>${RUNTIME_DIR}/.first_domain
+
+    FIRST_DOMAIN="$(cat ${RUNTIME_DIR}/.first_domain | tr '[A-Z]' '[a-z]')"
+
+    echo "${FIRST_DOMAIN}" | grep '\.' &>/dev/null
+    [ X"$?" == X"0" -a X"${FIRST_DOMAIN}" != X"${HOSTNAME}" ] && break
+done
+
+export FIRST_DOMAIN="${FIRST_DOMAIN}"
+echo "export FIRST_DOMAIN='${FIRST_DOMAIN}'" >> ${IREDMAIL_CONFIG_FILE}
+rm -f ${RUNTIME_DIR}/.first_domain
+
+# Domain admin password
+while : ; do
+    ${DIALOG} \
+    --title "Password for the mail domain administrator" \
+    --passwordbox "\
+Please specify password for the mail domain administrator:
+
+* ${DOMAIN_ADMIN_NAME}@${FIRST_DOMAIN}
+
+You can login to webmail and iRedAdmin with this account.
+
+WARNING:
+
+* Do *NOT* use special characters (like \$, white space) in password.
+* EMPTY password is *NOT* permitted.
+* Sample password: $(${RANDOM_STRING})
+" 20 76 2>${RUNTIME_DIR}/.first_domain_admin_passwd
+
+    DOMAIN_ADMIN_PASSWD_PLAIN="$(cat ${RUNTIME_DIR}/.first_domain_admin_passwd)"
+
+    [ X"${DOMAIN_ADMIN_PASSWD_PLAIN}" != X"" ] && break
+done
+
+export DOMAIN_ADMIN_PASSWD_PLAIN="${DOMAIN_ADMIN_PASSWD_PLAIN}"
+echo "export DOMAIN_ADMIN_PASSWD_PLAIN='${DOMAIN_ADMIN_PASSWD_PLAIN}'" >> ${IREDMAIL_CONFIG_FILE}
+rm -f ${RUNTIME_DIR}/.first_domain_admin_passwd
+
+cat >> ${TIP_FILE} <<EOF
+Admin of domain ${FIRST_DOMAIN}:
+
+    * Account: ${DOMAIN_ADMIN_NAME}@${FIRST_DOMAIN}
+    * Password: ${DOMAIN_ADMIN_PASSWD_PLAIN}
+
+    You can login to iRedAdmin with this account, login name is full email address.
+
+First mail user:
+    * Username: ${DOMAIN_ADMIN_NAME}@${FIRST_DOMAIN}
+    * Password: ${DOMAIN_ADMIN_PASSWD_PLAIN}
+    * SMTP/IMAP auth type: login
+    * Connection security: STARTTLS or SSL/TLS
+
+    You can login to webmail with this account, login name is full email address.
+
+EOF

package/dist/server/engine/functions/amavisd.sh

@@ -0,0 +1,267 @@
+#!/usr/bin/env bash
+
+# Author:   Zhang Huangbin (zhb _at_ iredmail.org)
+
+#---------------------------------------------------------------------
+# This file is part of iRedMail, which is an open source mail server
+# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
+#
+# iRedMail is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# iRedMail is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
+#---------------------------------------------------------------------
+
+# --------------------------------------------
+# Amavisd-new.
+# --------------------------------------------
+
+amavisd_initialize_db()
+{
+    ECHO_DEBUG "Import Amavisd database and grant privileges."
+
+    if [ X"${BACKEND}" == X'OPENLDAP' -o X"${BACKEND}" == X'MYSQL' ]; then
+        ${MYSQL_CLIENT_ROOT} <<EOF
+-- Create database
+CREATE DATABASE ${AMAVISD_DB_NAME} DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
+
+-- Create user and grant privileges
+CREATE USER '${AMAVISD_DB_USER}'@'${MYSQL_GRANT_HOST}' IDENTIFIED BY '${AMAVISD_DB_PASSWD}';
+GRANT SELECT,INSERT,UPDATE,DELETE ON ${AMAVISD_DB_NAME}.* TO '${AMAVISD_DB_USER}'@'${MYSQL_GRANT_HOST}';
+
+-- Import Amavisd SQL template
+USE ${AMAVISD_DB_NAME};
+SOURCE ${AMAVISD_DB_MYSQL_TMPL};
+SOURCE ${SAMPLE_DIR}/amavisd/default_spam_policy.sql;
+
+FLUSH PRIVILEGES;
+EOF
+
+        # Generate .my.cnf file
+        cat > /root/.my.cnf-${AMAVISD_DB_USER} <<EOF
+[client]
+host=${MYSQL_SERVER_ADDRESS}
+port=${MYSQL_SERVER_PORT}
+user=${AMAVISD_DB_USER}
+password="${AMAVISD_DB_PASSWD}"
+EOF
+
+    elif [ X"${BACKEND}" == X'PGSQL' ]; then
+        cp -f ${AMAVISD_DB_PGSQL_TMPL} ${PGSQL_USER_HOMEDIR}/amavisd.sql >> ${INSTALL_LOG} 2>&1
+        cp -f ${SAMPLE_DIR}/amavisd/default_spam_policy.sql ${PGSQL_USER_HOMEDIR}/default_spam_policy.sql >> ${INSTALL_LOG} 2>&1
+        chmod 0777 ${PGSQL_USER_HOMEDIR}/amavisd.sql >/dev/null
+
+        su - ${SYS_USER_PGSQL} -c "psql -d template1" >> ${INSTALL_LOG} 2>&1 <<EOF
+-- Create database
+CREATE DATABASE ${AMAVISD_DB_NAME} WITH TEMPLATE template0 ENCODING 'UTF8';
+
+-- Create user
+CREATE USER ${AMAVISD_DB_USER} WITH ENCRYPTED PASSWORD '${AMAVISD_DB_PASSWD}' NOSUPERUSER NOCREATEDB NOCREATEROLE;
+
+ALTER DATABASE ${AMAVISD_DB_NAME} OWNER TO ${AMAVISD_DB_USER};
+EOF
+
+        # Import Amavisd SQL template
+        su - ${SYS_USER_PGSQL} -c "psql -U ${AMAVISD_DB_USER} -d ${AMAVISD_DB_NAME}" >> ${INSTALL_LOG} 2>&1 <<EOF
+\i ${PGSQL_USER_HOMEDIR}/amavisd.sql;
+\i ${PGSQL_USER_HOMEDIR}/default_spam_policy.sql;
+EOF
+        rm -f ${PGSQL_USER_HOMEDIR}/{amavisd,default_spam_policy}.sql >> ${INSTALL_LOG}
+
+        su - ${SYS_USER_PGSQL} -c "psql -U ${AMAVISD_DB_USER} -d ${AMAVISD_DB_NAME}" >> ${INSTALL_LOG} 2>&1 <<EOF
+ALTER DATABASE ${AMAVISD_DB_NAME} SET bytea_output TO 'escape';
+EOF
+    fi
+
+    echo 'export status_amavisd_initialize_db="DONE"' >> ${STATUS_FILE}
+}
+
+amavisd_config()
+{
+    ECHO_INFO "Configure Amavisd-new (interface between MTA and content checkers)."
+
+    backup_file ${AMAVISD_CONF}
+
+    #
+    # DKIM
+    #
+    export AMAVISD_FIRST_DOMAIN_DKIM_KEY="${AMAVISD_DKIM_DIR}/${FIRST_DOMAIN}.pem"
+
+    ECHO_DEBUG "Generate DKIM pem files: ${AMAVISD_FIRST_DOMAIN_DKIM_KEY}."
+    mkdir -p ${AMAVISD_DKIM_DIR} &>/dev/null && \
+    chown -R ${SYS_USER_AMAVISD}:${SYS_GROUP_AMAVISD} ${AMAVISD_DKIM_DIR}
+    chmod -R 0700 ${AMAVISD_DKIM_DIR}
+
+    # Create DKIM key if not exists.
+    if [ ! -f ${AMAVISD_FIRST_DOMAIN_DKIM_KEY} ]; then
+        # Not all DNS vendor supports key length >= 2048, so we stick to 2048.
+        ${AMAVISD_BIN} genrsa ${AMAVISD_FIRST_DOMAIN_DKIM_KEY} 2048 &>/dev/null
+    fi
+
+    chown -R ${SYS_USER_AMAVISD}:${SYS_GROUP_AMAVISD} ${AMAVISD_FIRST_DOMAIN_DKIM_KEY}
+    chmod 0400 ${AMAVISD_FIRST_DOMAIN_DKIM_KEY}
+
+    #
+    # Disclaimer
+    #
+    # Create directory to store disclaimer files if not exist.
+    [ -d ${DISCLAIMER_DIR} ] || mkdir -p ${DISCLAIMER_DIR} >> ${INSTALL_LOG} 2>&1
+    # Create a empty disclaimer.
+    echo -e '\n----' > ${DISCLAIMER_DIR}/default.txt
+
+    #
+    # SQL integration
+    #
+    # Integrate SQL. Used to store incoming & outgoing related mail information.
+    if [ X"${BACKEND}" == X'PGSQL' ]; then
+        export AMAVISD_PERL_SQL_DBI='Pg'
+    else
+        if [ X"${DISTRO}" == X'DEBIAN' -o X"${DISTRO}" == X'UBUNTU' -o X"${DISTRO}" == X'FREEBSD' ]; then
+            export AMAVISD_PERL_SQL_DBI='mysql'
+        else
+            export AMAVISD_PERL_SQL_DBI='MariaDB'
+        fi
+    fi
+
+    #
+    # Main config file
+    #
+    cp -f ${SAMPLE_DIR}/amavisd/amavisd.conf ${AMAVISD_CONF} >> ${INSTALL_LOG} 2>&1
+
+    if [[ X"${DISTRO}" == X'RHEL' ]]; then
+        # `amavisd` command reads `/etc/amavisd.conf` by default.
+        ln -sf ${AMAVISD_CONF} /etc/amavisd.conf
+    fi
+
+    perl -pi -e 's#PH_SYS_USER_AMAVISD#$ENV{SYS_USER_AMAVISD}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_SYS_GROUP_AMAVISD#$ENV{SYS_GROUP_AMAVISD}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_HOSTNAME#$ENV{HOSTNAME}#g' ${AMAVISD_CONF}
+
+    perl -pi -e 's#PH_AMAVISD_SPOOL_DIR#$ENV{AMAVISD_SPOOL_DIR}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_TEMP_DIR#$ENV{AMAVISD_TEMP_DIR}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_DB_DIR#$ENV{AMAVISD_DB_DIR}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_QUARANTINE_DIR#$ENV{AMAVISD_QUARANTINE_DIR}#g' ${AMAVISD_CONF}
+
+    perl -pi -e 's#PH_AMAVISD_LOCK_FILE#$ENV{AMAVISD_LOCK_FILE}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_PID_FILE#$ENV{AMAVISD_PID_FILE}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_SOCKET_FILE#$ENV{AMAVISD_SOCKET_FILE}#g' ${AMAVISD_CONF}
+
+    perl -pi -e 's#PH_AMAVISD_SMTP_PORT#$ENV{AMAVISD_SMTP_PORT}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_ORIGINATING_PORT#$ENV{AMAVISD_ORIGINATING_PORT}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_QUARANTINE_PORT#$ENV{AMAVISD_QUARANTINE_PORT}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_POSTFIX_MAIL_REINJECT_PORT#$ENV{POSTFIX_MAIL_REINJECT_PORT}#g' ${AMAVISD_CONF}
+
+    perl -pi -e 's#PH_AMAVISD_MLMMJ_PORT#$ENV{AMAVISD_MLMMJ_PORT}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_POSTFIX_MLMMJ_REINJECT_PORT#$ENV{POSTFIX_MLMMJ_REINJECT_PORT}#g' ${AMAVISD_CONF}
+
+    perl -pi -e 's#PH_CLAMD_LOCAL_SOCKET#$ENV{CLAMD_LOCAL_SOCKET}#g' ${AMAVISD_CONF}
+
+    perl -pi -e 's#PH_FIRST_DOMAIN#$ENV{FIRST_DOMAIN}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_FIRST_DOMAIN_DKIM_KEY#$ENV{AMAVISD_FIRST_DOMAIN_DKIM_KEY}#g' ${AMAVISD_CONF}
+
+    perl -pi -e 's#PH_CMD_ALTERMIME#$ENV{CMD_ALTERMIME}#g' ${AMAVISD_CONF}
+
+    perl -pi -e 's#PH_AMAVISD_PERL_SQL_DBI#$ENV{AMAVISD_PERL_SQL_DBI}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_DB_NAME#$ENV{AMAVISD_DB_NAME}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_SQL_SERVER_ADDRESS#$ENV{SQL_SERVER_ADDRESS}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_SQL_SERVER_PORT#$ENV{SQL_SERVER_PORT}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_DB_USER#$ENV{AMAVISD_DB_USER}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_DB_PASSWD#$ENV{AMAVISD_DB_PASSWD}#g' ${AMAVISD_CONF}
+
+    perl -pi -e 's#PH_LOCAL_ADDRESS#$ENV{LOCAL_ADDRESS}#g' ${AMAVISD_CONF}
+    perl -pi -e 's#PH_AMAVISD_MAX_SERVERS#$ENV{AMAVISD_MAX_SERVERS}#g' ${AMAVISD_CONF}
+
+    if [ X"${DISTRO}" == X'RHEL' ]; then
+        usermod -G ${SYS_GROUP_AMAVISD} ${SYS_USER_CLAMAV} >> ${INSTALL_LOG} 2>&1
+    fi
+
+    if [ X"${DISTRO}" == X'RHEL' \
+        -o X"${DISTRO}" == X'FREEBSD' \
+        -o X"${DISTRO}" == X'OPENBSD' ]; then
+        chgrp ${SYS_GROUP_AMAVISD} ${AMAVISD_CONF}
+        chmod 0640 ${AMAVISD_CONF}
+    elif [ X"${DISTRO}" == X'DEBIAN' -o X"${DISTRO}" == X'UBUNTU' ]; then
+        # Make sure clamav is configured to init supplementary
+        # groups when it drops priviledges, and that you add the
+        # clamav user to the amavis group.
+        adduser --quiet ${SYS_USER_CLAMAV} ${SYS_GROUP_AMAVISD} >> ${INSTALL_LOG} 2>&1
+    fi
+
+    if [ X"${DISTRO}" == X'FREEBSD' ]; then
+        # Start service when system start up.
+        service_control enable 'amavisd_enable' 'YES'
+        service_control enable 'amavisd_pidfile' "${AMAVISD_PID_FILE}"
+        service_control enable 'amavis_milter_enable' 'NO'
+        service_control enable 'amavis_p0fanalyzer_enable' 'NO'
+    fi
+
+    #
+    # Postfix integration
+    #
+    cat ${SAMPLE_DIR}/postfix/main.cf.amavisd >> ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_SMTP_SERVER#$ENV{SMTP_SERVER}#g' ${POSTFIX_FILE_MAIN_CF}
+
+    # Add postfix alias for user: amavis.
+    add_postfix_alias ${SYS_USER_AMAVISD} ${SYS_USER_ROOT}
+
+    #
+    # Cron jobs
+    #
+    if [ -n "${AMAVISD_VIRUSMAILS_DIR}" ]; then
+        ECHO_DEBUG "Setting cron job for vmail user to delete virus mail per month."
+        cat >> ${CRON_FILE_AMAVISD} <<EOF
+${CONF_MSG}
+# Delete virus mails which created 15 days ago.
+1   5   *   *   *   touch ${AMAVISD_VIRUSMAILS_DIR}; find ${AMAVISD_VIRUSMAILS_DIR}/ -mtime +15 | xargs rm -rf {}
+
+EOF
+    fi
+
+    #
+    # Populate SQL data
+    #
+    if [ X"${INITIALIZE_SQL_DATA}" == X'YES' ]; then
+        check_status_before_run amavisd_initialize_db
+    fi
+
+    #
+    # Tip file
+    #
+    cat >> ${TIP_FILE} <<EOF
+Amavisd-new:
+    * Configuration files:
+        - ${AMAVISD_CONF}
+        - ${POSTFIX_FILE_MASTER_CF}
+        - ${POSTFIX_FILE_MAIN_CF}
+    * RC script:
+        - ${DIR_RC_SCRIPTS}/${AMAVISD_RC_SCRIPT_NAME}
+    * SQL Database:
+        - Database name: ${AMAVISD_DB_NAME}
+        - Database user: ${AMAVISD_DB_USER}
+        - Database password: ${AMAVISD_DB_PASSWD}
+
+DNS record for DKIM support:
+
+EOF
+
+    if [ X"${DISTRO}" == X'RHEL' ]; then
+        cat >> ${TIP_FILE} <<EOF
+$(${AMAVISD_BIN} -c ${AMAVISD_CONF} showkeys 2>> ${INSTALL_LOG})
+EOF
+    else
+        cat >> ${TIP_FILE} <<EOF
+$(${AMAVISD_BIN} showkeys 2>> ${INSTALL_LOG})
+EOF
+    fi
+
+    write_iredmail_kv "sql_user_${AMAVISD_DB_USER}" "${AMAVISD_DB_PASSWD}"
+    echo 'export status_amavisd_config="DONE"' >> ${STATUS_FILE}
+}

package/dist/server/engine/functions/backend.sh

@@ -0,0 +1,85 @@
+#!/usr/bin/env bash
+
+# Author:   Zhang Huangbin (zhb _at_ iredmail.org)
+
+#---------------------------------------------------------------------
+# This file is part of iRedMail, which is an open source mail server
+# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
+#
+# iRedMail is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# iRedMail is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
+#---------------------------------------------------------------------
+
+# -------------------------------------------------------
+# ------------- Install and config backend. -------------
+# -------------------------------------------------------
+backend_install()
+{
+    if [ X"${BACKEND}" == X'OPENLDAP' -o X"${BACKEND}" == X'MYSQL' ]; then
+        export SQL_SERVER_ADDRESS="${MYSQL_SERVER_ADDRESS}"
+        export SQL_SERVER_PORT="${MYSQL_SERVER_PORT}"
+        export SQL_ROOT_USER="${MYSQL_ROOT_USER}"
+        export SQL_ROOT_PASSWD="${MYSQL_ROOT_PASSWD}"
+    elif [ X"${BACKEND}" == X'PGSQL' ]; then
+        export SQL_SERVER_ADDRESS="${PGSQL_SERVER_ADDRESS}"
+        export SQL_SERVER_PORT="${PGSQL_SERVER_PORT}"
+        export SQL_ROOT_USER="${PGSQL_ROOT_USER}"
+        export SQL_ROOT_PASSWD="${PGSQL_ROOT_PASSWD}"
+    fi
+
+    # Check whether remote MySQL server is an IPv6 address.
+    SQL_SERVER_ADDRESS_IS_IPV6='NO'
+    if echo ${SQL_SERVER_ADDRESS} | grep ':' &>/dev/null; then
+        SQL_SERVER_ADDRESS_IS_IPV6='YES'
+    fi
+
+    if [ X"${DISTRO}" == X'FREEBSD' ]; then
+        # Generate sample Dovecot config files first to use `doveadm pw`.
+        # `dovecot.conf` will be re-generated, `conf.d/` will be removed.
+        if [ ! -f ${DOVECOT_CONF} ]; then
+            cp -rf /usr/local/etc/dovecot/example-config/{dovecot.conf,conf.d} /usr/local/etc/dovecot/
+
+            # Disable ssl in sample config file. it loads non-existing ssl
+            # cert/key files, this caused `doveadm pw` command failed to run,
+            # hence no password hash generated for postmaster@<first-domain>.
+            rm -f /usr/local/etc/dovecot/conf.d/10-ssl.conf
+        fi
+    else
+        rm -f /etc/dovecot/conf.d/10-ssl.conf
+    fi
+
+    # Hashed admin password with command `doveadm pw`. It requires dovecot package.
+    export DOMAIN_ADMIN_PASSWD_HASH="$(generate_password_hash ${DEFAULT_PASSWORD_SCHEME} ${DOMAIN_ADMIN_PASSWD_PLAIN})"
+
+    if [ X"${BACKEND}" == X'OPENLDAP' ]; then
+        # Install, config and initialize LDAP server
+        check_status_before_run ldap_server_config
+        check_status_before_run ldap_server_cron_backup
+
+        # Setup MySQL database server.
+        ECHO_INFO "Configure MariaDB database server."
+
+        check_status_before_run mysql_initialize_db
+        check_status_before_run mysql_generate_defaults_file_root
+        check_status_before_run mysql_remove_insecure_data
+        check_status_before_run mysql_cron_backup
+
+    elif [ X"${BACKEND}" == X'MYSQL' ]; then
+        check_status_before_run mysql_setup
+
+    elif [ X"${BACKEND}" == X'PGSQL' ]; then
+        check_status_before_run pgsql_setup
+    fi
+
+    write_iredmail_kv first_domain_admin_password "${DOMAIN_ADMIN_PASSWD_PLAIN}"
+}