openship 0.4.5 → 0.4.7

package/dist/server/engine/functions/postgresql.sh

@@ -0,0 +1,239 @@
+#!/usr/bin/env bash
+
+# Author:   Zhang Huangbin (zhb _at_ iredmail.org)
+
+#---------------------------------------------------------------------
+# This file is part of iRedMail, which is an open source mail server
+# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
+#
+# iRedMail is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# iRedMail is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
+#---------------------------------------------------------------------
+
+# -------------------------------------------------------
+# -------------------- PostgreSQL -----------------------
+# -------------------------------------------------------
+
+# NOTE: iRedMail will force all clients to send encrypted password
+#       after configuration completed and SQL data imported.
+# Reference: functions/cleanup.sh, function cleanup_pgsql_force_password().
+
+pgsql_initialize()
+{
+    ECHO_DEBUG "Initialize PostgreSQL databases."
+
+    # Init db
+    if [ X"${DISTRO}" == X'RHEL' ]; then
+        postgresql-setup initdb >> ${INSTALL_LOG} 2>&1
+    elif [ X"${DISTRO}" == X'FREEBSD' ]; then
+        # Start service when system start up.
+        # 'postgresql_enable=YES' is required to start service immediately.
+        service_control enable 'postgresql_enable' 'YES'
+
+        ${PGSQL_RC_SCRIPT} initdb >> ${INSTALL_LOG} 2>&1
+    elif [ X"${DISTRO}" == X'OPENBSD' ]; then
+        mkdir -p ${PGSQL_DATA_DIR} >> ${INSTALL_LOG} 2>&1
+        chown ${SYS_USER_PGSQL}:${SYS_GROUP_PGSQL} ${PGSQL_DATA_DIR}
+        su - ${SYS_USER_PGSQL} -c "initdb -D ${PGSQL_DATA_DIR} -U ${SYS_USER_PGSQL} -A trust" >> ${INSTALL_LOG} 2>&1
+    fi
+
+    backup_file ${PGSQL_CONF_PG_HBA} ${PGSQL_CONF_POSTGRESQL}
+
+    if [ -f ${PGSQL_CONF_POSTGRESQL} ]; then
+        ECHO_DEBUG "Make sure PostgreSQL binds to local address: ${SQL_SERVER_ADDRESS}."
+        perl -pi -e 's#.*(listen_addresses.=.)(.).*#${1}${2}$ENV{LOCAL_ADDRESS}${2}#' ${PGSQL_CONF_POSTGRESQL}
+
+        ECHO_DEBUG "Set client_min_messages to ERROR."
+        perl -pi -e 's#.*(client_min_messages =).*#${1} error#' ${PGSQL_CONF_POSTGRESQL}
+
+        # Disable SSL.
+        perl -pi -e 's/^#(ssl.=.)on(.*)/${1}off${2}/' ${PGSQL_CONF_POSTGRESQL}
+    fi
+
+    ECHO_DEBUG "Copy iRedMail SSL cert/key with strict permission."
+    backup_file ${PGSQL_DATA_DIR}/server.{crt,key}
+    rm -f ${PGSQL_DATA_DIR}/server.{crt,key} >> ${INSTALL_LOG} 2>&1
+    cp -f ${SSL_CERT_FILE} ${PGSQL_SSL_CERT} >> ${INSTALL_LOG} 2>&1
+    cp -f ${SSL_KEY_FILE} ${PGSQL_SSL_KEY} >> ${INSTALL_LOG} 2>&1
+    chown ${SYS_USER_PGSQL}:${SYS_GROUP_PGSQL} ${PGSQL_SSL_CERT} ${PGSQL_SSL_KEY} >> ${INSTALL_LOG} 2>&1
+    chmod 0600 ${PGSQL_SSL_CERT} ${PGSQL_SSL_KEY} >> ${INSTALL_LOG} 2>&1
+    ln -s ${PGSQL_SSL_CERT} ${PGSQL_DATA_DIR}/server.crt >> ${INSTALL_LOG} 2>&1
+    ln -s ${PGSQL_SSL_KEY} ${PGSQL_DATA_DIR}/server.key >> ${INSTALL_LOG} 2>&1
+
+    ECHO_DEBUG "Start PostgreSQL server and sleep 5 seconds for initialization"
+    service_control stop ${PGSQL_RC_SCRIPT_NAME}
+    sleep 5
+    service_control start ${PGSQL_RC_SCRIPT_NAME}
+    sleep 5
+
+    # Note: we must reset `postgres` password first, otherwise all connections
+    # will fail, because we cannot set/change passwords at all, so we're trying
+    # to connect with a wrong password.
+    ECHO_DEBUG "Setting password for PostgreSQL admin: (${PGSQL_ROOT_USER})."
+    su - ${SYS_USER_PGSQL} -c "psql -d template1" >> ${INSTALL_LOG} 2>&1 <<EOF
+ALTER USER ${PGSQL_ROOT_USER} WITH ENCRYPTED PASSWORD '${PGSQL_ROOT_PASSWD}';
+EOF
+
+    ECHO_DEBUG "Update pg_hba.conf to force local users to authenticate with md5."
+    perl -pi -e 's/^(local.*)/#${1}/g' ${PGSQL_CONF_PG_HBA}
+    perl -pi -e 's/^(host.*)/#${1}/g' ${PGSQL_CONF_PG_HBA}
+
+    echo "local all     ${SYS_USER_PGSQL}   peer" >> ${PGSQL_CONF_PG_HBA}
+    echo 'local all     all                 md5' >> ${PGSQL_CONF_PG_HBA}
+    echo 'host  all     all     0.0.0.0/0   md5' >> ${PGSQL_CONF_PG_HBA}
+
+    ECHO_DEBUG "Restart PostgreSQL server and sleeping for 5 seconds."
+    service_control stop ${PGSQL_RC_SCRIPT_NAME}
+    sleep 5
+    service_control start ${PGSQL_RC_SCRIPT_NAME}
+    sleep 5
+
+    ECHO_DEBUG "Generate ${PGSQL_DOT_PGPASS}."
+    cat > ${PGSQL_DOT_PGPASS} <<EOF
+*:*:*:${PGSQL_ROOT_USER}:${PGSQL_ROOT_PASSWD}
+*:*:*:${VMAIL_DB_BIND_USER}:${VMAIL_DB_BIND_PASSWD}
+*:*:*:${VMAIL_DB_ADMIN_USER}:${VMAIL_DB_ADMIN_PASSWD}
+*:*:*:${IREDAPD_DB_USER}:${IREDAPD_DB_PASSWD}
+*:*:*:${IREDADMIN_DB_USER}:${IREDADMIN_DB_PASSWD}
+*:*:*:${SOGO_DB_USER}:${SOGO_DB_PASSWD}
+*:*:*:${RCM_DB_USER}:${RCM_DB_PASSWD}
+*:*:*:${AMAVISD_DB_USER}:${AMAVISD_DB_PASSWD}
+*:*:*:${FAIL2BAN_DB_USER}:${FAIL2BAN_DB_PASSWD}
+EOF
+
+    chown ${SYS_USER_PGSQL}:${SYS_GROUP_PGSQL} ${PGSQL_DOT_PGPASS}
+    chmod 0600 ${PGSQL_DOT_PGPASS} >> ${INSTALL_LOG} 2>&1
+
+    cat >> ${TIP_FILE} <<EOF
+PostgreSQL:
+    * Admin user: ${PGSQL_ROOT_USER}, Password: ${PGSQL_ROOT_PASSWD}
+    * Bind account (read-only):
+        - Name: ${VMAIL_DB_BIND_USER}, Password: ${VMAIL_DB_BIND_PASSWD}
+    * Vmail admin account (read-write):
+        - Name: ${VMAIL_DB_ADMIN_USER}, Password: ${VMAIL_DB_ADMIN_PASSWD}
+    * Database stored in: ${PGSQL_DATA_DIR}
+    * RC script: ${PGSQL_RC_SCRIPT}
+    * Config files:
+        * ${PGSQL_CONF_POSTGRESQL}
+        * ${PGSQL_CONF_PG_HBA}
+    * Log file: /var/log/postgresql/
+    * See also:
+        - ${PGSQL_INIT_SQL_SAMPLE}
+        - ${PGSQL_DOT_PGPASS}
+
+EOF
+
+    echo 'export status_pgsql_initialize="DONE"' >> ${STATUS_FILE}
+}
+
+pgsql_import_vmail_users()
+{
+    ECHO_DEBUG "Generate sample SQL templates."
+    cp -f ${SAMPLE_DIR}/postgresql/sql/init_vmail_db.sql ${PGSQL_DATA_DIR}/
+    cp -f ${SAMPLE_DIR}/iredmail/iredmail.pgsql ${PGSQL_DATA_DIR}/iredmail.sql
+    cp -f ${SAMPLE_DIR}/postgresql/sql/add_first_domain_and_user.sql ${PGSQL_DATA_DIR}/
+    cp -f ${SAMPLE_DIR}/postgresql/sql/grant_permissions.sql ${PGSQL_DATA_DIR}/
+
+    # Create triggers for different Dovecot versions.
+    if [[ "${BACKEND}" == "PGSQL" ]]; then
+        cp -f ${SAMPLE_DIR}/iredmail/used_quota_triggers_dovecot_${DOVECOT_VERSION}.pgsql ${PGSQL_DATA_DIR}/used_quota_trigger.pgsql
+    fi
+
+    perl -pi -e 's#PH_VMAIL_DB_NAME#$ENV{VMAIL_DB_NAME}#g' ${PGSQL_DATA_DIR}/*.sql
+    perl -pi -e 's#PH_VMAIL_DB_BIND_USER#$ENV{VMAIL_DB_BIND_USER}#g' ${PGSQL_DATA_DIR}/*.sql
+    perl -pi -e 's#PH_VMAIL_DB_BIND_PASSWD#$ENV{VMAIL_DB_BIND_PASSWD}#g' ${PGSQL_DATA_DIR}/*.sql
+    perl -pi -e 's#PH_VMAIL_DB_ADMIN_USER#$ENV{VMAIL_DB_ADMIN_USER}#g' ${PGSQL_DATA_DIR}/*.sql
+    perl -pi -e 's#PH_VMAIL_DB_ADMIN_PASSWD#$ENV{VMAIL_DB_ADMIN_PASSWD}#g' ${PGSQL_DATA_DIR}/*.sql
+
+    perl -pi -e 's#PH_DOMAIN_ADMIN_EMAIL#$ENV{DOMAIN_ADMIN_EMAIL}#g' ${PGSQL_DATA_DIR}/*.sql
+    perl -pi -e 's#PH_FIRST_DOMAIN#$ENV{FIRST_DOMAIN}#g' ${PGSQL_DATA_DIR}/*.sql
+    perl -pi -e 's#PH_TRANSPORT#$ENV{TRANSPORT}#g' ${PGSQL_DATA_DIR}/*.sql
+    perl -pi -e 's#PH_DOMAIN_ADMIN_PASSWD_HASH#$ENV{DOMAIN_ADMIN_PASSWD_HASH}#g' ${PGSQL_DATA_DIR}/*.sql
+    perl -pi -e 's#PH_DOMAIN_ADMIN_MAILDIR_HASH_PART#$ENV{DOMAIN_ADMIN_MAILDIR_HASH_PART}#g' ${PGSQL_DATA_DIR}/*.sql
+    perl -pi -e 's#PH_DOMAIN_ADMIN_NAME#$ENV{DOMAIN_ADMIN_NAME}#g' ${PGSQL_DATA_DIR}/*.sql
+
+    perl -pi -e 's#^-- \\c#\\c#g' ${PGSQL_DATA_DIR}/iredmail.sql
+
+    # Modify default SQL template, set storagebasedirectory, storagenode.
+    perl -pi -e 's#(.*storagebasedirectory.*DEFAULT..)(.*)#${1}$ENV{STORAGE_BASE_DIR}${2}#' ${PGSQL_DATA_DIR}/iredmail.sql
+    perl -pi -e 's#(.*storagenode.*DEFAULT..)(.*)#${1}$ENV{STORAGE_NODE}${2}#' ${PGSQL_DATA_DIR}/iredmail.sql
+
+    chmod 0755 ${PGSQL_DATA_DIR}/*sql
+
+    ECHO_DEBUG "Create roles (${VMAIL_DB_BIND_USER}, ${VMAIL_DB_ADMIN_USER}) and database: ${VMAIL_DB_NAME}."
+    su - ${SYS_USER_PGSQL} -c "psql -d template1 -f ${PGSQL_DATA_DIR}/init_vmail_db.sql" >> ${INSTALL_LOG} 2>&1
+
+    ECHO_DEBUG "Create tables in ${VMAIL_DB_NAME} database."
+    export PGPASSFILE="${PGSQL_DOT_PGPASS}"
+    su - ${SYS_USER_PGSQL} -c "psql -d template1 -f ${PGSQL_DATA_DIR}/iredmail.sql" >> ${INSTALL_LOG} 2>&1
+
+    # Create triggers for different Dovecot versions.
+    su - ${SYS_USER_PGSQL} -c "psql -d ${VMAIL_DB_NAME} -f ${PGSQL_DATA_DIR}/used_quota_trigger.pgsql" >> ${INSTALL_LOG} 2>&1
+
+    ECHO_DEBUG "Grant permissions."
+    su - ${SYS_USER_PGSQL} -c "psql -d template1 -f ${PGSQL_DATA_DIR}/grant_permissions.sql" >> ${INSTALL_LOG} 2>&1
+
+    ECHO_DEBUG "Add first domain and postmaster@ user."
+    su - ${SYS_USER_PGSQL} -c "psql -U ${VMAIL_DB_ADMIN_USER} -d template1 -f ${PGSQL_DATA_DIR}/add_first_domain_and_user.sql" >> ${INSTALL_LOG} 2>&1
+
+    mv ${PGSQL_DATA_DIR}/*sql ${RUNTIME_DIR}
+    chmod 0700 ${RUNTIME_DIR}/*sql
+
+    cat >> ${TIP_FILE} <<EOF
+SQL commands used to initialize database and import mail accounts:
+    - ${RUNTIME_DIR}/*.sql
+
+EOF
+
+    echo 'export status_pgsql_import_vmail_users="DONE"' >> ${STATUS_FILE}
+}
+
+pgsql_cron_backup()
+{
+    pgsql_backup_script="${BACKUP_DIR}/${BACKUP_SCRIPT_PGSQL_NAME}"
+    ECHO_INFO "Setup daily cron job to backup PostgreSQL databases with ${pgsql_backup_script}"
+
+    [ ! -d ${BACKUP_DIR} ] && mkdir -p ${BACKUP_DIR} >> ${INSTALL_LOG} 2>&1
+
+    backup_file ${pgsql_backup_script}
+    cp ${TOOLS_DIR}/${BACKUP_SCRIPT_PGSQL_NAME} ${pgsql_backup_script}
+    chown ${SYS_USER_ROOT}:${SYS_GROUP_ROOT} ${pgsql_backup_script}
+    chmod 0500 ${pgsql_backup_script}
+
+    perl -pi -e 's#^(export SYS_USER_PGSQL=).*#${1}"$ENV{SYS_USER_PGSQL}"#' ${pgsql_backup_script}
+    perl -pi -e 's#^(export BACKUP_ROOTDIR=).*#${1}"$ENV{BACKUP_DIR}"#' ${pgsql_backup_script}
+
+    # Add cron job
+    cat >> ${CRON_FILE_ROOT} <<EOF
+# ${PROG_NAME}: Backup PostgreSQL databases on 03:01 AM
+1   3   *   *   *   ${SHELL_BASH} ${pgsql_backup_script}
+
+EOF
+
+    echo 'export status_pgsql_cron_backup="DONE"' >> ${STATUS_FILE}
+}
+
+pgsql_setup()
+{
+    ECHO_INFO "Configure PostgreSQL database server."
+
+    check_status_before_run pgsql_initialize
+    check_status_before_run pgsql_import_vmail_users
+    check_status_before_run pgsql_cron_backup
+
+    write_iredmail_kv "sql_user_${PGSQL_ROOT_USER}" "${PGSQL_ROOT_PASSWD}"
+    write_iredmail_kv "sql_user_${VMAIL_DB_BIND_USER}" "${VMAIL_DB_BIND_PASSWD}"
+    write_iredmail_kv "sql_user_${VMAIL_DB_ADMIN_USER}" "${VMAIL_DB_ADMIN_PASSWD}"
+
+    echo 'export status_pgsql_setup="DONE"' >> ${STATUS_FILE}
+}

package/dist/server/engine/functions/spamassassin.sh

@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+
+# Author: Zhang Huangbin <zhb _at_ iredmail.org>
+
+# ---------------------------------------------------------
+# SpamAssassin.
+# ---------------------------------------------------------
+sa_config()
+{
+    ECHO_INFO "Configure SpamAssassin (content-based spam filter)."
+
+    backup_file ${SA_LOCAL_CF}
+
+    ECHO_DEBUG "Copy sample SpamAssassin config file: ${SAMPLE_DIR}/spamassassin/local.cf -> ${SA_LOCAL_CF}."
+    cp -f ${SAMPLE_DIR}/spamassassin/local.cf ${SA_LOCAL_CF}
+    cp -f ${SAMPLE_DIR}/spamassassin/razor.conf ${SA_PLUGIN_RAZOR_CONF}
+
+    perl -pi -e 's#PH_SA_PLUGIN_RAZOR_CONF#$ENV{SA_PLUGIN_RAZOR_CONF}#g' ${SA_LOCAL_CF}
+
+    ECHO_DEBUG "Enable crontabs for SpamAssassin update."
+    if [ X"${DISTRO}" == X'RHEL' ]; then
+        if [ -f ${ETC_SYSCONFIG_DIR}/sa-update ]; then
+            perl -pi -e 's/^#(SAUPDATE=yes)/${1}/' ${ETC_SYSCONFIG_DIR}/sa-update
+        fi
+
+        # Enable daily cron job to update rules.
+        if [[ ! -x /etc/cron.daily/sa-update ]]; then
+            ln -sf /usr/share/spamassassin/sa-update.cron /etc/cron.daily/sa-update
+        fi
+    elif [ X"${DISTRO}" == X'UBUNTU' -o X"${DISTRO}" == X'DEBIAN' ]; then
+        [[ -f /etc/default/spamassassin ]] && \
+            perl -pi -e 's#^(CRON=)0#${1}1#' /etc/default/spamassassin
+    fi
+
+    if [ X"${DISTRO}" == X'FREEBSD' ]; then
+        ECHO_DEBUG "Compile SpamAssassin ruleset into native code."
+        sa-compile >> ${INSTALL_LOG} 2>&1
+    fi
+
+    cat >> ${TIP_FILE} <<EOF
+SpamAssassin:
+    * Configuration files and rules:
+        - ${SA_CONF_DIR}
+        - ${SA_CONF_DIR}/local.cf
+
+EOF
+
+    echo 'export status_sa_config="DONE"' >> ${STATUS_FILE}
+}

package/dist/server/engine/functions/system_accounts.sh

@@ -0,0 +1,128 @@
+#!/usr/bin/env bash
+
+# Author: Zhang Huangbin <zhb _at_ iredmail.org>
+
+# Add required system accounts
+
+add_user_vmail()
+{
+    ECHO_DEBUG "Create system account: ${SYS_USER_VMAIL}:${SYS_GROUP_VMAIL} (${SYS_USER_VMAIL_UID}:${SYS_GROUP_VMAIL_GID})."
+
+    # Create STORAGE_BASE_DIR and set correct owner and permission.
+    if [ ! -d ${STORAGE_BASE_DIR} ]; then
+        mkdir -p ${STORAGE_BASE_DIR} >> ${INSTALL_LOG} 2>&1
+        chown ${SYS_USER_ROOT}:${SYS_GROUP_ROOT} ${STORAGE_BASE_DIR} >> ${INSTALL_LOG} 2>&1
+        chmod -R 0755 ${STORAGE_BASE_DIR} >> ${INSTALL_LOG} 2>&1
+    fi
+
+    [ -d ${STORAGE_MAILBOX_DIR} ] || mkdir -p ${STORAGE_MAILBOX_DIR} >> ${INSTALL_LOG} 2>&1
+    [ -d ${PUBLIC_MAILBOX_DIR} ] || mkdir -p ${PUBLIC_MAILBOX_DIR} >> ${INSTALL_LOG} 2>&1
+
+    # vmail/vmail must has the same UID/GID on all supported Linux/BSD
+    # distributions, required by cluster environment. e.g. GlusterFS.
+    add_sys_user_group \
+        ${SYS_USER_VMAIL} \
+        ${SYS_GROUP_VMAIL} \
+        ${SYS_USER_VMAIL_UID} \
+        ${SYS_GROUP_VMAIL_GID} >> ${INSTALL_LOG} 2>&1
+
+    if [ -n "${MAILBOX_INDEX_DIR}" ]; then
+        if [ ! -d ${MAILBOX_INDEX_DIR} ]; then
+            ECHO_DEBUG "Create directory used to store mailbox indexes: ${MAILBOX_INDEX_DIR}."
+            mkdir -p ${MAILBOX_INDEX_DIR} >> ${INSTALL_LOG} 2>&1
+            chown -R ${SYS_USER_VMAIL}:${SYS_GROUP_VMAIL} ${MAILBOX_INDEX_DIR}
+            chmod -R 0700 ${MAILBOX_INDEX_DIR}
+        fi
+    fi
+
+    ECHO_DEBUG "Create directory used to store global sieve filters: ${SIEVE_DIR}."
+    mkdir -p ${SIEVE_DIR} &>/dev/null
+
+    export DOMAIN_ADMIN_MAILDIR_HASH_PART="${FIRST_DOMAIN}/$(hash_maildir --no-timestamp ${DOMAIN_ADMIN_NAME})"
+    export DOMAIN_ADMIN_MAILDIR_FULL_PATH="${STORAGE_MAILBOX_DIR}/${DOMAIN_ADMIN_MAILDIR_HASH_PART}"
+
+    # Create maildir.
+    # We will deliver emails with sensitive info of iRedMail installation
+    # to postmaster immediately after installation completed.
+    # NOTE: 'Maildir/' is appended by Dovecot (defined in dovecot.conf).
+    export DOMAIN_ADMIN_MAILDIR_INBOX="${DOMAIN_ADMIN_MAILDIR_FULL_PATH}/Maildir/new"
+    mkdir -p ${DOMAIN_ADMIN_MAILDIR_INBOX} >> ${INSTALL_LOG} 2>&1
+
+    # set owner/group and permission.
+    chown -R ${SYS_USER_VMAIL}:${SYS_GROUP_VMAIL} ${STORAGE_MAILBOX_DIR} ${PUBLIC_MAILBOX_DIR} ${SIEVE_DIR}
+    chmod -R 0700 ${STORAGE_MAILBOX_DIR} ${PUBLIC_MAILBOX_DIR} ${SIEVE_DIR}
+
+    # backup directory
+    [ -d ${BACKUP_DIR} ] || mkdir -p ${BACKUP_DIR} &>/dev/null
+    chown ${SYS_USER_ROOT}:${SYS_GROUP_ROOT} ${BACKUP_DIR}
+    chmod 0700 ${BACKUP_DIR}
+
+    cat >> ${TIP_FILE} <<EOF
+Mail Storage:
+    - Mailboxes: ${STORAGE_MAILBOX_DIR}
+    - Mailbox indexes: ${MAILBOX_INDEX_DIR}
+    - Global sieve filters: ${SIEVE_DIR}
+    - Backup scripts and backup copies: ${BACKUP_DIR}
+
+EOF
+
+    echo 'export status_add_user_vmail="DONE"' >> ${STATUS_FILE}
+}
+
+add_user_iredadmin()
+{
+    add_sys_user_group \
+        ${SYS_USER_IREDADMIN} \
+        ${SYS_GROUP_IREDADMIN} \
+        ${SYS_USER_IREDADMIN_UID} \
+        ${SYS_GROUP_IREDADMIN_GID}
+
+    echo 'export status_add_user_iredadmin="DONE"' >> ${STATUS_FILE}
+}
+
+add_user_mlmmj()
+{
+    add_sys_user_group \
+        ${SYS_USER_MLMMJ} \
+        ${SYS_GROUP_MLMMJ} \
+        ${SYS_USER_MLMMJ_UID} \
+        ${SYS_GROUP_MLMMJ_GID} \
+        ${MLMMJ_HOME_DIR}
+
+    echo 'export status_add_user_mlmmj="DONE"' >> ${STATUS_FILE}
+}
+
+add_user_iredapd()
+{
+    add_sys_user_group \
+        ${SYS_USER_IREDAPD} \
+        ${SYS_GROUP_IREDAPD} \
+        ${SYS_USER_IREDAPD_UID} \
+        ${SYS_GROUP_IREDAPD_GID}
+
+    echo 'export status_add_user_iredapd="DONE"' >> ${STATUS_FILE}
+}
+
+add_user_netdata()
+{
+    add_sys_user_group \
+        ${SYS_USER_NETDATA} \
+        ${SYS_GROUP_NETDATA} \
+        ${SYS_USER_NETDATA_UID} \
+        ${SYS_GROUP_NETDATA_GID}
+
+    echo 'export status_add_user_netdata="DONE"' >> ${STATUS_FILE}
+}
+
+
+add_required_users()
+{
+    ECHO_INFO "Create required system accounts."
+
+    check_status_before_run add_user_vmail
+    check_status_before_run add_user_mlmmj
+    check_status_before_run add_user_iredadmin
+    check_status_before_run add_user_iredapd
+
+    [ X"${USE_NETDATA}" == X'YES' ] && check_status_before_run add_user_netdata
+}

package/dist/server/engine/iRedMail.sh

@@ -0,0 +1,144 @@
+#!/usr/bin/env bash
+
+# Author:   Zhang Huangbin (zhb@iredmail.org)
+
+#---------------------------------------------------------------------
+# This file is part of iRedMail, which is an open source mail server
+# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
+#
+# iRedMail is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# iRedMail is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
+#---------------------------------------------------------------------
+
+# ------------------------------
+# Define some global variables.
+# ------------------------------
+tmprootdir="$(dirname $0)"
+echo ${tmprootdir} | grep '^/' >/dev/null 2>&1
+if [ X"$?" == X"0" ]; then
+    export ROOTDIR="${tmprootdir}"
+else
+    export ROOTDIR="$(pwd)"
+fi
+
+cd ${ROOTDIR}
+
+export CONF_DIR="${ROOTDIR}/conf"
+export FUNCTIONS_DIR="${ROOTDIR}/functions"
+export DIALOG_DIR="${ROOTDIR}/dialog"
+export PKG_DIR="${ROOTDIR}/pkgs/pkgs"
+export PKG_MISC_DIR="${ROOTDIR}/pkgs/misc"
+export SAMPLE_DIR="${ROOTDIR}/samples"
+export PATCH_DIR="${ROOTDIR}/patches"
+export TOOLS_DIR="${ROOTDIR}/tools"
+export RUNTIME_DIR="${ROOTDIR}/runtime"
+
+[[ -d ${RUNTIME_DIR} ]] || mkdir -p ${RUNTIME_DIR}
+
+. ${CONF_DIR}/global
+. ${CONF_DIR}/core
+
+# Check downloaded packages, pkg repository.
+[ -f ${STATUS_FILE} ] && . ${STATUS_FILE}
+if [ X"${status_get_all}" != X"DONE" ]; then
+    cd ${ROOTDIR}/pkgs/ && bash get_all.sh
+    if [ X"$?" == X'0' ]; then
+        cd ${ROOTDIR}
+    else
+        exit 255
+    fi
+fi
+
+# --------------------------------------
+# Check target platform and environment.
+# --------------------------------------
+# Required by OpenVZ:
+# Make sure others can read-write /dev/null and /dev/*random, so that it won't
+# interrupt iRedMail installation.
+chmod go+rx /dev/null /dev/*random &>/dev/null
+
+check_env
+
+# Define paths of some directories
+# Directory used to store mailboxes
+export STORAGE_MAILBOX_DIR="${STORAGE_MAILBOX_DIR:=${STORAGE_BASE_DIR}/${STORAGE_NODE}}"
+# Directory used to store sieve filters
+export SIEVE_DIR="${SIEVE_DIR:=${STORAGE_BASE_DIR}/sieve}"
+# Directory used to store daily SQL/LDAP backup files
+export BACKUP_DIR="${BACKUP_DIR:=${STORAGE_BASE_DIR}/backup}"
+# Directory used to store public IMAP folders
+export PUBLIC_MAILBOX_DIR="${PUBLIC_MAILBOX_DIR:=${STORAGE_BASE_DIR}/public}"
+
+# Domain admin email address
+export DOMAIN_ADMIN_EMAIL="${DOMAIN_ADMIN_NAME}@${FIRST_DOMAIN}"
+
+# Import global variables in specified order.
+. ${CONF_DIR}/postgresql
+. ${CONF_DIR}/dovecot
+. ${CONF_DIR}/postfix
+. ${CONF_DIR}/amavisd
+. ${CONF_DIR}/iredapd
+. ${CONF_DIR}/clamav
+. ${CONF_DIR}/spamassassin
+. ${CONF_DIR}/fail2ban
+. ${CONF_DIR}/logwatch
+
+# Import functions in specified order.
+if [ X"${DISTRO}" == X'FREEBSD' ]; then
+    # Install packages from freebsd ports tree.
+    . ${FUNCTIONS_DIR}/packages_freebsd.sh
+else
+    . ${FUNCTIONS_DIR}/packages.sh
+fi
+
+. ${FUNCTIONS_DIR}/system_accounts.sh
+. ${FUNCTIONS_DIR}/postgresql.sh
+
+# Switch backend
+. ${FUNCTIONS_DIR}/backend.sh
+
+. ${FUNCTIONS_DIR}/postfix.sh
+. ${FUNCTIONS_DIR}/dovecot.sh
+. ${FUNCTIONS_DIR}/amavisd.sh
+. ${FUNCTIONS_DIR}/iredapd.sh
+. ${FUNCTIONS_DIR}/clamav.sh
+. ${FUNCTIONS_DIR}/spamassassin.sh
+. ${FUNCTIONS_DIR}/fail2ban.sh
+. ${FUNCTIONS_DIR}/optional_components.sh
+. ${FUNCTIONS_DIR}/cleanup.sh
+
+# ************************************************************************
+# *************************** Script Main ********************************
+# ************************************************************************
+
+# Install all required packages.
+check_status_before_run install_all || (ECHO_ERROR "Package installation error, please check the output log.\n\n" && exit 255)
+
+cat <<EOF
+
+********************************************************************
+* Start iRedMail Configurations
+********************************************************************
+EOF
+
+
+check_status_before_run generate_ssl_keys
+check_status_before_run add_required_users
+check_status_before_run backend_install
+check_status_before_run postfix_setup
+check_status_before_run dovecot_setup
+check_status_before_run clamav_config
+check_status_before_run amavisd_config
+check_status_before_run sa_config
+optional_components
+check_status_before_run cleanup