1. ubuntu@ch1:~$ sudo cat /var/log/keyhelp/install.log
2. Start install: 2022-01-14 20:01:45
3. Operating System: Ubuntu 20.04 (64-bit)
4.  
5. ================================================================================
6.   Placeholders
7. ================================================================================
8.  
9.   install.ssh_keys =
10.   install.nagios =
11.   install.midnight_commander =
12.   install.server_setup =
13.   install.hide_lts_notice = 1
14.   install.hostname =
15.   general.preferred_protocol = ipv4
16.   system.email = root@***HOSTNAME***
17.   server.domain = ***HOSTNAME***
18.   server.current_hostname = ***HOSTNAME***
19.   server.timezone = Europe/Sarajevo
20.   server.fstab = LABEL=cloudimg-rootfs     /     ext4     defaults,usrquota,grpquota     0     1
21.   LABEL=UEFI    /boot/efi       vfat    umask=0077      0 1
22.  
23.   # CLOUD_IMG: This file was created/modified by the Cloud Image build process
24.   ######################################
25.   ## ORACLE CLOUD INFRASTRUCTURE CUSTOMERS
26.   ##
27.   ## If you are adding an iSCSI remote block volume to this file you MUST
28.   ## include the '_netdev' mount option or your instance will become
29.   ## unavailable after the next reboot.
30.   ## SCSI device names are not stable across reboots; please use the device UUID
31.   ## instead of /dev path.
32.   ##
33.   ## Example:
34.   ## UUID=94c5aade-8bb1-4d55-ad0c-388bb8aa716a /data1 ext4 defaults,noatime,_netdev 0 2
35.   ##
36.   ## More information:
37.   ## https://docs.us-phoenix-1.oraclecloud.com/Content/Block/Tasks/connectingtoavolume.htm
38.   ##
39.   encryption.base = ***KH_ENCRYPTION_BASE***
40.   webserver.log_format_with_logio = %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O
41.   webserver.log_format_without_logio = %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" 0 0
42.   webserver.http_port = 80
43.   webserver.https_port = 443
44.   dir.home = /home/keyhelp
45.   dir.keyhelp = /home/keyhelp/www/keyhelp
46.   dir.webmail = /home/keyhelp/www/webmail
47.   dir.roundcube = /home/keyhelp/www/roundcube
48.   dir.rainloop = /home/keyhelp/www/rainloop
49.   dir.db-administration = /home/keyhelp/www/db-administration
50.   dir.phpmyadmin = /home/keyhelp/www/phpmyadmin
51.   dir.adminer = /home/keyhelp/www/adminer
52.   dir.statistics = /home/keyhelp/www/kh.webstats
53.   dir.acme_challenge = /home/keyhelp/www/.well-known/acme-challenge
54.   dir.autoconfig = /home/keyhelp/www/keyhelp/misc/emailconfig
55.   email.virus_checks =
56.   dovecot.imap_login_process_limit = 100
57.   dovecot.max_userip_connections = 10
58.   dovecot.enforce_quota = 1
59.   postfix.inet_protocols = ipv4
60.   clamav.signatures_for_config =
61.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/junk.ndb
62.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/jurlbl.ndb
63.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/phish.ndb
64.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/rogue.hdb
65.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/sanesecurity.ftm
66.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/sigwhitelist.ign2
67.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/scam.ndb
68.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/spamimg.hdb
69.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/spamattach.hdb
70.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/blurl.ndb
71.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/foxhole_generic.cdb
72.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/foxhole_filename.cdb
73.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/malwarehash.hsb
74.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/hackingteam.hsb
75.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_malware.hdb
76.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_malware_links.ndb
77.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_extended_malware.hdb
78.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow.attachments.hdb
79.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_bad_cw.hdb
80.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_cracked_URL.ndb
81.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_malware_URL.ndb
82.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_phishing_URL.ndb
83.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_malware_attach.hdb
84.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/porcupine.ndb
85.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/phishtank.ndb
86.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/porcupine.hsb
87.   DatabaseCustomURL https://urlhaus.abuse.ch/downloads/urlhaus.ndb
88.  
89.   php.version = 7.4
90.   db.tuning_file = tuning.cnf
91.   db.setup.username = root
92.   db.setup.password =
93.   db.root.username = root
94.   db.root.password = ***DB_ROOT_PASS***
95.   db.keyhelp.host = localhost
96.   db.keyhelp.username = keyhelp
97.   db.keyhelp.password = ***DB_KH_PASS***
98.   db.keyhelp.dbname = keyhelp
99.   db.keyhelp_root.host = localhost
100.   db.keyhelp_root.username = keyhelp_root
101.   db.keyhelp_root.password = ***DB_KH_ROOT_PASS***
102.   bind.rname = root.***HOSTNAME***.
103.   bind.serial = 2022011400
104.   bind.name_servers.0 = ns.***HOSTNAME***.
105.   bind.name_servers.1 = ns2.***HOSTNAME***.
106.   bind.ips_v4.0 = ***IP_0***
107.   admin.username = admin
108.   admin.password = ***KH_ADMIN_PASS***
109.   admin.email = root@***HOSTNAME***
110.   phpmyadmin.password = ***PMA_PASS***
111.   phpmyadmin.blowfishsecret = ***PMA_CRYPT***
112.   roundcube.product_name = KeyHelp Webmail
113.   roundcube.support_url =
114.   roundcube.password = ***RC_PASS***
115.   roundcube.plugins = 'managesieve','password','keyhelp_sync_identities'
116.   roundcube.plugins_db = managesieve, password, keyhelp_sync_identities
117.   roundcube.skin = elastic
118.   roundcube.24_byte_des_key = ***RC_CRYPT***
119.   roundcube.pw_length = 8
120.   rainloop.product_name = KeyHelp Webmail
121.   rainloop.password = ***RL_PASS***
122.   rainloop.language = en
123.   keyhelp.id = 1333baa4a67a9c300b89437de5c36b274d386ae2351591d8718362a09635dfebdc6f4f00bd9ef2e21264e4ae572d05bf5bef25b22371a369a8571626d3af6f0b
124.   keyhelp.url = https://***HOSTNAME***
125.   keyhelp.version = 21.3
126.   keyhelp.settings.ips = ***IP_0***
127.   keyhelp.settings.name_servers = ns.***HOSTNAME***.,ns2.***HOSTNAME***.
128.   keyhelp.language = en
129.   ftp.tls_required =
130.   ssh_keys.support_keys =
131.   firewall.rule_set = common
132.  
133. ################################################################################
134. ################################################################################
135.  
136.  
137. ================================================================================
138.   Update sources list
139. ================================================================================
140.  
141.   exec  | apt-get update
142.           Hit:1 http://ports.ubuntu.com/ubuntu-ports focal-security InRelease
143.           Hit:2 http://eu-zurich-1-ad-1.clouds.ports.ubuntu.com/ubuntu-ports focal InRelease
144.           Hit:3 http://eu-zurich-1-ad-1.clouds.ports.ubuntu.com/ubuntu-ports focal-updates InRelease
145.           Hit:4 http://eu-zurich-1-ad-1.clouds.ports.ubuntu.com/ubuntu-ports focal-backports InRelease
146.           Reading package lists...
147.  
148.  
149. ================================================================================
150.   Installation requirements
151. ================================================================================
152.  
153.   exec  | apt-get install -y unzip
154.           Reading package lists...
155.           Building dependency tree...
156.           Reading state information...
157.           unzip is already the newest version (6.0-25ubuntu1).
158.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
159.   exec  | apt-get install -y zip
160.           Reading package lists...
161.           Building dependency tree...
162.           Reading state information...
163.           zip is already the newest version (3.0-11build1).
164.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
165.   exec  | apt-get install -y bzip2
166.           Reading package lists...
167.           Building dependency tree...
168.           Reading state information...
169.           bzip2 is already the newest version (1.0.8-2).
170.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
171.  
172.  
173. ================================================================================
174.   Sudo
175. ================================================================================
176.  
177.   exec  | apt-get install -y sudo
178.           Reading package lists...
179.           Building dependency tree...
180.           Reading state information...
181.           sudo is already the newest version (1.8.31-1ubuntu1.2).
182.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
183.  
184.  
185. ================================================================================
186.   Bind9
187. ================================================================================
188.  
189.   exec  | echo "***HOSTNAME***" > /etc/hostname
190.   exec  | apt-get install -y bind9
191.           Reading package lists...
192.           Building dependency tree...
193.           Reading state information...
194.           bind9 is already the newest version (1:9.16.1-0ubuntu2.9).
195.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
196.  
197.   files | bind/keyhelp_domain.conf.twig => /etc/bind/keyhelp_domain.conf
198.   files | bind/named.conf => /etc/bind/named.conf
199.   files | bind/named.conf.local => /etc/bind/named.conf.local
200.  
201.   exec  | mkdir -p -m 0755 /etc/bind/keyhelp_domains/
202.   exec  | touch /etc/bind/named.conf.keyhelp
203.   exec  | service bind9 restart
204.  
205.  
206. ================================================================================
207.   SSL/TLS
208. ================================================================================
209.  
210.   exec  | apt-get install -y openssl
211.           Reading package lists...
212.           Building dependency tree...
213.           Reading state information...
214.           openssl is already the newest version (1.1.1f-1ubuntu2.10).
215.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
216.   exec  | mkdir -p -m 0700 /etc/ssl/keyhelp/pem/
217.   exec  | mkdir -p -m 0700 /etc/ssl/keyhelp/files/
218.  
219.   files | tls/keyhelp-root-ca.crt => /etc/ssl/keyhelp/root-ca.crt
220.  
221.   exec  | chmod 0600 /etc/ssl/keyhelp/root-ca.crt
222.   exec  | openssl genrsa -out /etc/ssl/keyhelp/files/default.key 2048
223.           Generating RSA private key, 2048 bit long modulus (2 primes)
224.           ..+++++
225.           ..................+++++
226.           e is 65537 (0x010001)
227.   exec  | openssl req -new -sha256 -key /etc/ssl/keyhelp/files/default.key -out /etc/ssl/keyhelp/files/default.csr -subj '/C=DE/ST=Thuringia/L=Erfurt/O=KeyHelp/OU=KeyHelp Panel/CN=***HOSTNAME***/[email protected]'
228.   exec  | openssl x509 -req -sha256 -days 3650 -in /etc/ssl/keyhelp/files/default.csr -signkey /etc/ssl/keyhelp/files/default.key -out /etc/ssl/keyhelp/files/default.crt
229.           Signature ok
230.           subject=C = DE, ST = Thuringia, L = Erfurt, O = KeyHelp, OU = KeyHelp Panel, CN = ***HOSTNAME***, emailAddress = [email protected]
231.           Getting Private key
232.   exec  | cat /etc/ssl/keyhelp/files/default.key /etc/ssl/keyhelp/files/default.csr /etc/ssl/keyhelp/files/default.crt > /etc/ssl/keyhelp/pem/default.pem
233.   exec  | cat /etc/ssl/keyhelp/root-ca.crt > /etc/ssl/keyhelp/files/default-ca.crt
234.   exec  | ln -s -f /etc/ssl/keyhelp/pem/default.pem /etc/ssl/keyhelp/keyhelp.pem
235.   exec  | ln -s -f /etc/ssl/keyhelp/pem/default.pem /etc/ssl/keyhelp/ftp.pem
236.   exec  | ln -s -f /etc/ssl/keyhelp/pem/default.pem /etc/ssl/keyhelp/mail.pem
237.   exec  | ln -s -f /etc/ssl/keyhelp/pem/default.pem /etc/ssl/keyhelp/webmail.pem
238.   exec  | ln -s -f /etc/ssl/keyhelp/files/default-ca.crt /etc/ssl/keyhelp/keyhelp-ca.crt
239.   exec  | ln -s -f /etc/ssl/keyhelp/files/default-ca.crt /etc/ssl/keyhelp/ftp-ca.crt
240.   exec  | ln -s -f /etc/ssl/keyhelp/files/default-ca.crt /etc/ssl/keyhelp/mail-ca.crt
241.   exec  | ln -s -f /etc/ssl/keyhelp/files/default-ca.crt /etc/ssl/keyhelp/webmail-ca.crt
242.   exec  | chown -R keyhelp:keyhelp /etc/ssl/keyhelp/files/
243.   exec  | chmod 0600 /etc/ssl/keyhelp/files/*
244.   exec  | chmod 0600 /etc/ssl/keyhelp/pem/*
245.  
246.  
247. ================================================================================
248.   PHP
249. ================================================================================
250.  
251.   exec  | apt-get install -y php php-curl php-gd imagemagick php-imagick php-mail-mime php-net-sieve php-pspell php-net-socket php-auth-sasl php-intl php7.4-mysql php-net-smtp php-zip php-bcmath php-soap
252.           Reading package lists...
253.           Building dependency tree...
254.           Reading state information...
255.           php is already the newest version (2:7.4+75).
256.           php-curl is already the newest version (2:7.4+75).
257.           php-gd is already the newest version (2:7.4+75).
258.           php-pspell is already the newest version (2:7.4+75).
259.           php-auth-sasl is already the newest version (1.0.6-3).
260.           php-bcmath is already the newest version (2:7.4+75).
261.           php-imagick is already the newest version (3.4.4-4).
262.           php-intl is already the newest version (2:7.4+75).
263.           php-mail-mime is already the newest version (1.10.6-1).
264.           php-net-sieve is already the newest version (1.4.1-1).
265.           php-net-smtp is already the newest version (1.9.0-1).
266.           php-net-socket is already the newest version (1.0.14-2).
267.           php-soap is already the newest version (2:7.4+75).
268.           php-zip is already the newest version (2:7.4+75).
269.           php7.4-mysql is already the newest version (7.4.3-4ubuntu2.8).
270.           imagemagick is already the newest version (8:6.9.10.23+dfsg-2.1ubuntu11.4).
271.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
272.  
273.   files | php/timezone.ini => /etc/php/7.4/mods-available/timezone.ini
274.   files | php/charset.ini => /etc/php/7.4/mods-available/charset.ini
275.  
276.   exec  | phpdismod timezone
277.   exec  | phpenmod timezone/30
278.   exec  | phpdismod charset
279.   exec  | phpenmod charset/30
280.  
281.  
282. ================================================================================
283.   Apache web server
284. ================================================================================
285.  
286.   exec  | apt-get install -y apache2 libapache2-mod-fcgid apache2-suexec-custom
287.           Reading package lists...
288.           Building dependency tree...
289.           Reading state information...
290.           libapache2-mod-fcgid is already the newest version (1:2.3.9-4).
291.           apache2 is already the newest version (2.4.41-4ubuntu3.9).
292.           apache2-suexec-custom is already the newest version (2.4.41-4ubuntu3.9).
293.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
294.   exec  | grep -q -F "Include keyhelp/keyhelp.conf" /etc/apache2/apache2.conf || printf "\n#Include KeyHelp vHosts\nInclude keyhelp/keyhelp.conf\n" >> /etc/apache2/apache2.conf
295.   exec  | mkdir -p -m 0755 /etc/apache2/keyhelp/
296.   exec  | mkdir -p -m 0755 /etc/apache2/keyhelp/vhosts/
297.   exec  | mkdir -p -m 0755 /etc/apache2/keyhelp/htpasswd/
298.   exec  | touch /etc/apache2/keyhelp/subdomain_catch_all.conf
299.  
300.   files | apache/acme.conf => /etc/apache2/conf-available/acme.conf
301.   files | apache/autoconfig.conf => /etc/apache2/keyhelp/autoconfig.conf
302.   files | apache/apache2.service => /lib/systemd/system/apache2.service
303.   files | apache/keyhelp.conf => /etc/apache2/keyhelp/keyhelp.conf
304.   files | apache/mod_http2.conf => /etc/apache2/mods-available/http2.conf
305.   files | apache/mod_mime.conf => /etc/apache2/mods-available/mime.conf
306.   files | apache/mod_ssl.conf.twig => /etc/apache2/mods-available/ssl.conf
307.   files | apache/other-vhosts-access-log.conf => /etc/apache2/conf-available/other-vhosts-access-log.conf
308.   files | apache/ports.conf => /etc/apache2/ports.conf
309.   files | apache/security.conf => /etc/apache2/conf-available/security.conf
310.   files | apache/suexec_www-data => /etc/apache2/suexec/www-data
311.   files | apache/webmail_redirect.conf => /etc/apache2/keyhelp/webmail.conf
312.  
313.   exec  | mkdir -p -m 0755 /home/keyhelp/www/roundcube
314.   exec  | mkdir -p -m 0755 /home/keyhelp/www/rainloop
315.   exec  | mkdir -p -m 0755 /home/keyhelp/www/phpmyadmin
316.   exec  | mkdir -p -m 0755 /home/keyhelp/www/adminer
317.   exec  | mkdir -p -m 0755 /home/keyhelp/www/kh.webstats
318.   exec  | mkdir -p -m 0750 /var/log/apache2/keyhelp
319.   exec  | rm -f /home/keyhelp/www/webmail
320.   exec  | ln -s roundcube /home/keyhelp/www/webmail
321.   exec  | rm -f /home/keyhelp/www/db-administration
322.   exec  | ln -s phpmyadmin /home/keyhelp/www/db-administration
323.   exec  | a2enmod actions fcgid alias auth_digest suexec deflate expires headers ssl rewrite include http2 cgid
324.           Module actions already enabled
325.           Module fcgid already enabled
326.           Module alias already enabled
327.           Considering dependency authn_core for auth_digest:
328.           Module authn_core already enabled
329.           Module auth_digest already enabled
330.           Module suexec already enabled
331.           Considering dependency filter for deflate:
332.           Module filter already enabled
333.           Module deflate already enabled
334.           Module expires already enabled
335.           Module headers already enabled
336.           Considering dependency setenvif for ssl:
337.           Module setenvif already enabled
338.           Considering dependency mime for ssl:
339.           Module mime already enabled
340.           Considering dependency socache_shmcb for ssl:
341.           Module socache_shmcb already enabled
342.           Module ssl already enabled
343.           Module rewrite already enabled
344.           Considering dependency mime for include:
345.           Module mime already enabled
346.           Module include already enabled
347.           Module http2 already enabled
348.           Module cgid already enabled
349.   exec  | a2enmod proxy proxy_fcgi
350.           Module proxy already enabled
351.           Considering dependency proxy for proxy_fcgi:
352.           Module proxy already enabled
353.           Module proxy_fcgi already enabled
354.   exec  | a2dissite 000-default
355.           Site 000-default already disabled
356.   exec  | a2enconf acme
357.           Conf acme already enabled
358.   exec  | a2enmod access_compat
359.           Considering dependency authn_core for access_compat:
360.           Module authn_core already enabled
361.           Module access_compat already enabled
362.   exec  | a2dismod php7.4
363.           Module php7.4 already disabled
364.   exec  | a2dismod mpm_prefork
365.           Module mpm_prefork already disabled
366.   exec  | a2dismod mpm_event
367.           Module mpm_event already disabled
368.   exec  | a2enmod mpm_worker
369.           Considering conflict mpm_event for mpm_worker:
370.           Considering conflict mpm_prefork for mpm_worker:
371.           Module mpm_worker already enabled
372.   exec  | systemctl daemon-reload
373.   exec  | service apache2 restart
374.  
375.  
376. ================================================================================
377.   PHP-FPM
378. ================================================================================
379.  
380.   exec  | apt-get install -y php-fpm
381.           Reading package lists...
382.           Building dependency tree...
383.           Reading state information...
384.           php-fpm is already the newest version (2:7.4+75).
385.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
386.   exec  | rm -f /etc/php/7.4/fpm/pool.d/www.conf*
387.  
388.   files | phpfpm/php-fpm.conf => /etc/php/7.4/fpm/php-fpm.conf
389.   files | phpfpm/keyhelp.conf => /etc/php/7.4/fpm/pool.d/keyhelp.conf
390.  
391.   exec  | phpenmod ioncube
392.   exec  | mkdir -p -m 0755 /etc/php/7.4/fpm/keyhelp_pool
393.   exec  | service php7.4-fpm restart
394.  
395.  
396. ================================================================================
397.   MariaDB
398. ================================================================================
399.  
400.   exec  | apt-get install -y mariadb-server
401.           Reading package lists...
402.           Building dependency tree...
403.           Reading state information...
404.           mariadb-server is already the newest version (1:10.3.32-0ubuntu0.20.04.1).
405.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
406.   exec  | apt-get install -y libdbd-mysql-perl
407.           Reading package lists...
408.           Building dependency tree...
409.           Reading state information...
410.           libdbd-mysql-perl is already the newest version (4.050-3).
411.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
412.  
413.   files | database/tuning.cnf => /etc/mysql/mariadb.conf.d/90-tuning.cnf
414.   files | database/mariadb.cnf => /etc/mysql/conf.d/mariadb.cnf
415.  
416.   exec  | service mysql restart
417.  
418.   db    | UPDATE `mysql`.`user` SET `Password` = PASSWORD('***DB_ROOT_PASS***') WHERE `User` = 'root'
419.   db    | DELETE FROM `mysql`.`user` WHERE `User` = ''
420.   db    | DELETE FROM `mysql`.`user` WHERE `User` = 'root' AND `Host` NOT IN ('localhost', '127.0.0.1', '::1')
421.   db    | DROP DATABASE IF EXISTS `test`
422.   db    | FLUSH PRIVILEGES
423.   db    | GRANT ALL PRIVILEGES ON *.* TO 'mysqladmin'@'localhost' IDENTIFIED BY '***DB_ROOT_PASS***' WITH GRANT OPTION
424.  
425.  
426. ================================================================================
427.   KeyHelp
428. ================================================================================
429.  
430.   exec  | chmod 0750 /home/keyhelp
431.   exec  | chown keyhelp:keyhelp /home/keyhelp/www/kh.webstats
432.   exec  | chown -h keyhelp:keyhelp /home/keyhelp/www/webmail
433.   exec  | chown -h keyhelp:keyhelp /home/keyhelp/www/db-administration
434.   exec  | chgrp www-data /home/keyhelp
435.   exec  | usermod -aG www-data keyhelp
436.   exec  | groupadd --force keyhelp_file_manager
437.   exec  | groupadd --force keyhelp_nossh
438.   exec  | groupadd --force keyhelp_noftp
439.   exec  | groupadd --force keyhelp_suspended
440.   exec  | groupadd --force keyhelp_chroot
441.   exec  | mkdir -p -m 0700 /etc/keyhelp/
442.   exec  | mkdir -p -m 0700 /etc/keyhelp/config
443.   exec  | mkdir -p -m 0700 /etc/keyhelp/skel
444.   exec  | chown keyhelp:keyhelp -R /etc/keyhelp/
445.   exec  | mkdir -p -m 0755 /usr/local/keyhelp/
446.   exec  | echo '# --------------------------------------------------
447.   #  This file is managed by KeyHelp.                
448.   #  If you want to change its content, please use    
449.   #  the corresponding configuration menu.            
450.   # --------------------------------------------------
451.   hostmaster: root
452.   postmaster: root
453.   webmaster: root
454.   abuse: root' > /etc/aliases
455.  
456.   files | sudoers/keyhelp => /etc/sudoers.d/keyhelp
457.   files | sudoers/keyhelp_file_manager => /etc/sudoers.d/keyhelp_file_manager
458.   files | keyhelp/config.json => /etc/keyhelp/config/config.json
459.   files | keyhelp/skel/README => /etc/keyhelp/skel/README
460.   files | bin/call_url => /usr/local/keyhelp/call_url
461.  
462.   db    | DROP DATABASE IF EXISTS `keyhelp`
463.   db    | CREATE DATABASE `keyhelp`
464.   db    | GRANT ALL PRIVILEGES ON keyhelp.* TO 'keyhelp'@'localhost' IDENTIFIED BY '***DB_KH_PASS***'
465.   db    | GRANT ALL PRIVILEGES ON *.* TO 'keyhelp_root'@'localhost' IDENTIFIED BY '***DB_KH_ROOT_PASS***' WITH GRANT OPTION
466.   db    | FLUSH PRIVILEGES
467.  
468.   import | /home/keyhelp/www/keyhelp/install/templates/keyhelp/keyhelp.sql => keyhelp
469.   import | /home/keyhelp/www/keyhelp/install/templates/keyhelp/prohibited_domains.sql => keyhelp
470.  
471.   exec  | chmod 0440 /etc/sudoers.d/keyhelp
472.   exec  | chmod 0440 /etc/sudoers.d/keyhelp_file_manager
473.   exec  | chmod 0600 /etc/keyhelp/config/config.json
474.   exec  | chown keyhelp:keyhelp /etc/keyhelp/config/config.json
475.   exec  | chown keyhelp:keyhelp /etc/keyhelp/skel
476.   exec  | chmod +x /usr/local/keyhelp/call_url
477.   exec  | chmod +x /home/keyhelp/www/keyhelp/bin/toolbox.php
478.   exec  | rm -fr /usr/bin/keyhelp-toolbox
479.   exec  | ln -s /home/keyhelp/www/keyhelp/bin/toolbox.php /usr/bin/keyhelp-toolbox
480.  
481.   db    | INSERT INTO `keyhelp`.`ssl_certificates` SET `id` = '1', `name` = 'default', `file_name` = 'default';
482.   db    | UPDATE `keyhelp`.`settings` SET `value` = '1333baa4a67a9c300b89437de5c36b274d386ae2351591d8718362a09635dfebdc6f4f00bd9ef2e21264e4ae572d05bf5bef25b22371a369a8571626d3af6f0b'                                WHERE `category` = 'general'           AND `name` = 'keyhelp_id'
483.   db    | UPDATE `keyhelp`.`settings` SET `value` = 'https://***HOSTNAME***'                               WHERE `category` = 'general'           AND `name` = 'panelurl'
484.   db    | UPDATE `keyhelp`.`settings` SET `value` = '***HOSTNAME***'                             WHERE `category` = 'general'           AND `name` = 'hostname'
485.   db    | UPDATE `keyhelp`.`settings` SET `value` = 'root@***HOSTNAME***'                              WHERE `category` = 'general'           AND `name` = 'system_email'
486.   db    | UPDATE `keyhelp`.`settings` SET `value` = 'ns.***HOSTNAME***.,ns2.***HOSTNAME***.'             WHERE `category` = 'dns'               AND `name` = 'name_servers'
487.   db    | UPDATE `keyhelp`.`settings` SET `value` = '***IP_0***'                      WHERE `category` = 'dns'               AND `name` = 'ips'
488.   db    | UPDATE `keyhelp`.`settings` SET `value` = '21.3'                           WHERE `category` = 'sys'               AND `name` = 'version'
489.   db    | UPDATE `keyhelp`.`settings` SET `value` = 'ipv4'                WHERE `category` = 'sys'               AND `name` = 'prefer_family'
490.   db    | UPDATE `keyhelp`.`settings` SET `value` = 'Europe/Sarajevo'                           WHERE `category` = 'sys'               AND `name` = 'time_zone'
491.   db    | UPDATE `keyhelp`.`settings` SET `value` = 'https://***HOSTNAME***/db-administration/'            WHERE `category` = 'db_administration' AND `name` = 'nav_url'
492.   db    | UPDATE `keyhelp`.`settings` SET `value` = 'https://***HOSTNAME***/webmail/'                      WHERE `category` = 'webmail'           AND `name` = 'nav_url'
493.   db    | UPDATE `keyhelp`.`settings` SET `value` = 'managesieve, password, keyhelp_sync_identities'                      WHERE `category` = 'roundcube'         AND `name` = 'plugins'
494.   db    | UPDATE `keyhelp`.`settings` SET `value` = 'en'                          WHERE `category` = 'language'          AND `name` = 'default'
495.   db    | UPDATE `keyhelp`.`settings` SET `value` = '1'  WHERE `category` = 'email'             AND `name` = 'enable_virus_checks'
496.   db    | UPDATE `keyhelp`.`settings` SET `value` = '1' WHERE `category` = 'general' AND `name` = 'show_welcome_message'
497.   db    | UPDATE `keyhelp`.`maintenance_intervals` SET `timeframe_start` = '2', `timeframe_end` = '3' WHERE `name` = 'panel-update'
498.   db    | UPDATE `keyhelp`.`maintenance_intervals` SET `timeframe_start` = '6',  `timeframe_end` = '7'  WHERE `name` = 'repo-update'
499.   db    | UPDATE `keyhelp`.`settings` SET `value` = '1' WHERE `category` = 'ssl' AND `name` = 'panel_certificate'
500.   db    | UPDATE `keyhelp`.`settings` SET `value` = '1' WHERE `category` = 'ssl' AND `name` = 'ftp_certificate'
501.   db    | UPDATE `keyhelp`.`settings` SET `value` = '1' WHERE `category` = 'ssl' AND `name` = 'mail_certificate'
502.   db    | UPDATE `keyhelp`.`settings` SET `value` = '1' WHERE `category` = 'ssl' AND `name` = 'webmail_certificate'
503.   db    | INSERT INTO `keyhelp`.`users` SET `username` = 'admin', `password` = '$2y$10$ItofrAckl.fwtfZ0gaZU4Od60v7OmdNs8do51K9yyUoOOYp6y6QVW', `is_admin` = '1', `is_main_admin` = '1', `email` = 'root@***HOSTNAME***', `lang` = 'en', `setup_date` = '2022-01-14 20:01:45'
504.   db    | INSERT INTO `keyhelp`.`account_templates` SET `name`='Unlimited', `disk_space`=-1, `traffic`=-1, `email_accounts`=-1, `email_addresses`=-1, `domains` =-1, `subdomains`=-1, `databases`=-1, `ftp_users`=-1, `scheduled_tasks`=-1, `ftp`=1, `php`=1, `perl`=0, `ssh`=0, `backup`=1, `panel_access`=1, `domain_security`=1, `manage_certs`=1, `file_manager`='1', `applications`='1', `dns_editor`='1', `db_remote_access`=1, `change_personal_data`=1, `php_memory_limit`='80M', `php_max_execution_time`=60, `php_post_max_size`='72M', `php_upload_max_filesize`='64M', `php_open_basedir`='##DOCROOT##/www:##DOCROOT##/files:##DOCROOT##/tmp', `php_disable_functions`='dl, disk_free_space, diskfreespace, stream_socket_sendto, proc_get_status, proc_nice, proc_open, proc_terminate, proc_close, popen, curl_multi_exec, pcntl_exec, pcntl_fork, pcntl_setpriority, symlink, link, posix_kill, posix_mkfifo, posix_setsid, posix_setuid, posix_setpgid, posix_getpwuid, show_source, highlight_file, syslog, error_log, openlog, define_syslog_variables, apache_child_terminate, apache_setenv, apache_note', `php_additional_settings`='', `phpfpm_pm`='ondemand', `phpfpm_max_children`=3, `phpfpm_max_requests`=0, `phpfpm_min_spare_servers`='', `phpfpm_max_spare_servers`='', `phpfpm_status_enabled`=0, `phpfpm_status_ip_restriction`=''
505.  
506.   exec  | sed -i "s/# en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/gI" /etc/locale.gen
507.   exec  | locale-gen en_US.UTF-8
508.           Generating locales (this might take a while)...
509.             en_US.UTF-8... done
510.           Generation complete.
511.  
512.  
513. ================================================================================
514.   Backup tools
515. ================================================================================
516.  
517.   exec  | rm -rf /tmp/keyhelp_update/
518.   exec  | mkdir -p -m 0755 /tmp/keyhelp_update
519.   exec  | wget --no-verbose --no-check-certificate --prefer-family='ipv4' --output-document='/tmp/keyhelp_update/restic.bz2' https://github.com/restic/restic/releases/download/v0.12.1/restic_0.12.1_linux_arm64.bz2
520.           2022-01-14 20:01:58 URL:https://objects.githubusercontent.com/github-production-release-asset-2e65be/19205896/2a1881ca-f1c7-419f-a266-8c645807b8c5?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20220114%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220114T190158Z&X-Amz-Expires=300&X-Amz-Signature=278b533775a4d9b84d508a43c56ccfdda1447d5cac3e3e04826c6c7a15c61a02&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=19205896&response-content-disposition=attachment%3B%20filename%3Drestic_0.12.1_linux_arm64.bz2&response-content-type=application%2Foctet-stream [5619633/5619633] -> "/tmp/keyhelp_update/restic.bz2" [1]
521.   exec  | bunzip2 --force /tmp/keyhelp_update/restic.bz2
522.   exec  | chmod 0755 /tmp/keyhelp_update/restic
523.   exec  | mv /tmp/keyhelp_update/restic /usr/local/bin/restic
524.   exec  | wget --no-verbose --no-check-certificate --prefer-family='ipv4' --output-document='/tmp/keyhelp_update/rclone.zip' https://downloads.rclone.org/v1.56.2/rclone-v1.56.2-linux-arm64.zip
525.           2022-01-14 20:02:00 URL:https://downloads.rclone.org/v1.56.2/rclone-v1.56.2-linux-arm64.zip [13513736/13513736] -> "/tmp/keyhelp_update/rclone.zip" [1]
526.   exec  | unzip -j -o '/tmp/keyhelp_update/rclone.zip' -d '/tmp/keyhelp_update/rclone/'
527.           Archive:  /tmp/keyhelp_update/rclone.zip
528.             inflating: /tmp/keyhelp_update/rclone/git-log.txt
529.             inflating: /tmp/keyhelp_update/rclone/rclone
530.             inflating: /tmp/keyhelp_update/rclone/README.txt
531.             inflating: /tmp/keyhelp_update/rclone/README.html
532.             inflating: /tmp/keyhelp_update/rclone/rclone.1
533.   exec  | if [ `command -v mandb` ]; then mkdir -p /usr/local/share/man/man1 && cp /tmp/keyhelp_update/rclone/rclone.1 /usr/local/share/man/man1/rclone.1 && mandb; fi
534.           Purging old database entries in /usr/share/man...
535.           Processing manual pages under /usr/share/man...
536.           Purging old database entries in /usr/share/man/tr...
537.           Processing manual pages under /usr/share/man/tr...
538.           Purging old database entries in /usr/share/man/fi...
539.           Processing manual pages under /usr/share/man/fi...
540.           Purging old database entries in /usr/share/man/cs...
541.           Processing manual pages under /usr/share/man/cs...
542.           Purging old database entries in /usr/share/man/zh_CN...
543.           Processing manual pages under /usr/share/man/zh_CN...
544.           Purging old database entries in /usr/share/man/ja...
545.           Processing manual pages under /usr/share/man/ja...
546.           Purging old database entries in /usr/share/man/fr...
547.           Processing manual pages under /usr/share/man/fr...
548.           Purging old database entries in /usr/share/man/pl...
549.           Processing manual pages under /usr/share/man/pl...
550.           Purging old database entries in /usr/share/man/ru...
551.           Processing manual pages under /usr/share/man/ru...
552.           Purging old database entries in /usr/share/man/sr...
553.           Processing manual pages under /usr/share/man/sr...
554.           Purging old database entries in /usr/share/man/it...
555.           Processing manual pages under /usr/share/man/it...
556.           Purging old database entries in /usr/share/man/sl...
557.           Processing manual pages under /usr/share/man/sl...
558.           Purging old database entries in /usr/share/man/zh_TW...
559.           Processing manual pages under /usr/share/man/zh_TW...
560.           Purging old database entries in /usr/share/man/de...
561.           Processing manual pages under /usr/share/man/de...
562.           Purging old database entries in /usr/share/man/es...
563.           Processing manual pages under /usr/share/man/es...
564.           Purging old database entries in /usr/share/man/sv...
565.           Processing manual pages under /usr/share/man/sv...
566.           Purging old database entries in /usr/share/man/pt_BR...
567.           Processing manual pages under /usr/share/man/pt_BR...
568.           Purging old database entries in /usr/share/man/da...
569.           Processing manual pages under /usr/share/man/da...
570.           Purging old database entries in /usr/share/man/ko...
571.           Processing manual pages under /usr/share/man/ko...
572.           Purging old database entries in /usr/share/man/hu...
573.           Processing manual pages under /usr/share/man/hu...
574.           Purging old database entries in /usr/share/man/id...
575.           Processing manual pages under /usr/share/man/id...
576.           Purging old database entries in /usr/share/man/pt...
577.           Processing manual pages under /usr/share/man/pt...
578.           Purging old database entries in /usr/share/man/nl...
579.           Processing manual pages under /usr/share/man/nl...
580.           Purging old database entries in /usr/local/man...
581.           Processing manual pages under /usr/local/man...
582.           0 man subdirectories contained newer manual pages.
583.           0 manual pages were added.
584.           0 stray cats were added.
585.           5 old database entries were purged.
586.   exec  | chmod 0755 /tmp/keyhelp_update/rclone/rclone
587.   exec  | mv /tmp/keyhelp_update/rclone/rclone /usr/local/bin/rclone
588.   exec  | mkdir -p -m 0777 /backup-keyhelp/
589.   exec  | chown keyhelp:keyhelp /backup-keyhelp/
590.  
591.  
592. ================================================================================
593.   Firewall
594. ================================================================================
595.  
596.   exec  | apt-get install -y iptables
597.           Reading package lists...
598.           Building dependency tree...
599.           Reading state information...
600.           iptables is already the newest version (1.8.4-3ubuntu2).
601.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
602.   exec  | mkdir -p -m 0700 /etc/keyhelp/iptables/
603.   exec  | apt-get install -y nftables
604.           Reading package lists...
605.           Building dependency tree...
606.           Reading state information...
607.           nftables is already the newest version (0.9.3-2).
608.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
609.   exec  | mkdir -p -m 0755 /etc/nftables/
610.  
611.   files | firewall/rules/rules_ipv4_common => /etc/keyhelp/iptables/startup_rules_ipv4
612.   files | firewall/rules/rules_ipv6_common => /etc/keyhelp/iptables/startup_rules_ipv6
613.   files | nftables/nftables.conf => /etc/nftables.conf
614.   files | nftables/fail2ban.conf => /etc/nftables/fail2ban.conf
615.  
616.   exec  | chown keyhelp:keyhelp -R /etc/keyhelp/iptables/
617.   exec  | nft -f /etc/nftables/fail2ban.conf
618.  
619.   import | /home/keyhelp/www/keyhelp/install/templates/firewall/rules/common.sql => keyhelp
620.  
621.  
622. ================================================================================
623.   SSH
624. ================================================================================
625.  
626.   exec  | apt-get install -y openssh-server
627.           Reading package lists...
628.           Building dependency tree...
629.           Reading state information...
630.           openssh-server is already the newest version (1:8.2p1-4ubuntu0.4).
631.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
632.   exec  | grep --quiet "^\s*DenyGroups keyhelp_nossh keyhelp_suspended" /etc/ssh/sshd_config || printf "\n# Limit KeyHelp usergroup\nDenyGroups keyhelp_nossh keyhelp_suspended\n" >> /etc/ssh/sshd_config
633.   exec  | grep --quiet "^\s*Match Group keyhelp_chroot" /etc/ssh/sshd_config || printf "\nMatch Group keyhelp_chroot\n ChrootDirectory %%h\n AllowTCPForwarding no\n X11Forwarding no\nMatch all\n" >> /etc/ssh/sshd_config
634.   exec  | service ssh restart
635.  
636.  
637. ================================================================================
638.   ProFTPD
639. ================================================================================
640.  
641.   exec  | /usr/share/debconf/fix_db.pl
642.   exec  | echo "proftpd-basic shared/proftpd/inetd_or_standalone select standalone" | sudo debconf-set-selections
643.   exec  | DEBIAN_FRONTEND=noninteractive apt-get install -y proftpd-basic proftpd-mod-mysql
644.           Reading package lists...
645.           Building dependency tree...
646.           Reading state information...
647.           proftpd-basic is already the newest version (1.3.6c-2).
648.           proftpd-mod-mysql is already the newest version (1.3.6c-2).
649.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
650.   exec  | DEBIAN_FRONTEND=dialog
651.  
652.   files | proftpd/modules.conf => /etc/proftpd/modules.conf
653.   files | proftpd/proftpd.conf => /etc/proftpd/proftpd.conf
654.   files | proftpd/sql.conf => /etc/proftpd/sql.conf
655.   files | proftpd/tls.conf.twig => /etc/proftpd/tls.conf
656.  
657.   exec  | chmod 0640 /etc/proftpd/proftpd.conf
658.   exec  | chmod 0600 /etc/proftpd/sql.conf
659.   exec  | service proftpd stop
660.   exec  | service proftpd start
661.  
662.  
663. ================================================================================
664.   Postfix
665. ================================================================================
666.  
667.   exec  | /usr/share/debconf/fix_db.pl
668.   exec  | echo "postfix postfix/mailname string ***HOSTNAME***" | sudo debconf-set-selections
669.   exec  | echo "postfix postfix/main_mailer_type string 'Internet Site'" | sudo debconf-set-selections
670.   exec  | DEBIAN_FRONTEND=noninteractive apt-get install -y postfix postfix-mysql postfix-policyd-spf-python
671.           Reading package lists...
672.           Building dependency tree...
673.           Reading state information...
674.           postfix is already the newest version (3.4.13-0ubuntu1.2).
675.           The following additional packages will be installed:
676.             python3-authres python3-dns python3-spf python3-spf-engine
677.           The following NEW packages will be installed:
678.             postfix-mysql postfix-policyd-spf-python python3-authres python3-dns
679.             python3-spf python3-spf-engine
680.           0 upgraded, 6 newly installed, 0 to remove and 0 not upgraded.
681.           Need to get 163 kB of archives.
682.           After this operation, 667 kB of additional disk space will be used.
683.           Get:1 http://eu-zurich-1-ad-1.clouds.ports.ubuntu.com/ubuntu-ports focal-updates/main arm64 postfix-mysql arm64 3.4.13-0ubuntu1.2 [21.0 kB]
684.           Get:2 http://eu-zurich-1-ad-1.clouds.ports.ubuntu.com/ubuntu-ports focal/universe arm64 python3-authres all 1.2.0-2 [17.1 kB]
685.           Get:3 http://eu-zurich-1-ad-1.clouds.ports.ubuntu.com/ubuntu-ports focal/universe arm64 python3-dns all 3.2.1-1 [25.6 kB]
686.           Get:4 http://eu-zurich-1-ad-1.clouds.ports.ubuntu.com/ubuntu-ports focal/universe arm64 python3-spf all 2.0.14-1 [57.6 kB]
687.           Get:5 http://eu-zurich-1-ad-1.clouds.ports.ubuntu.com/ubuntu-ports focal/universe arm64 python3-spf-engine all 2.9.2-1 [17.1 kB]
688.           Get:6 http://eu-zurich-1-ad-1.clouds.ports.ubuntu.com/ubuntu-ports focal/universe arm64 postfix-policyd-spf-python all 2.9.2-1 [24.9 kB]
689.           Fetched 163 kB in 0s (1106 kB/s)
690.           Selecting previously unselected package postfix-mysql.
691. (Reading database ... 118173 files and directories currently installed.)
692.           Preparing to unpack .../0-postfix-mysql_3.4.13-0ubuntu1.2_arm64.deb ...
693.           Unpacking postfix-mysql (3.4.13-0ubuntu1.2) ...
694.           Selecting previously unselected package python3-authres.
695.           Preparing to unpack .../1-python3-authres_1.2.0-2_all.deb ...
696.           Unpacking python3-authres (1.2.0-2) ...
697.           Selecting previously unselected package python3-dns.
698.           Preparing to unpack .../2-python3-dns_3.2.1-1_all.deb ...
699.           Unpacking python3-dns (3.2.1-1) ...
700.           Selecting previously unselected package python3-spf.
701.           Preparing to unpack .../3-python3-spf_2.0.14-1_all.deb ...
702.           Unpacking python3-spf (2.0.14-1) ...
703.           Selecting previously unselected package python3-spf-engine.
704.           Preparing to unpack .../4-python3-spf-engine_2.9.2-1_all.deb ...
705.           Unpacking python3-spf-engine (2.9.2-1) ...
706.           Selecting previously unselected package postfix-policyd-spf-python.
707.           Preparing to unpack .../5-postfix-policyd-spf-python_2.9.2-1_all.deb ...
708.           Unpacking postfix-policyd-spf-python (2.9.2-1) ...
709.           Setting up python3-authres (1.2.0-2) ...
710.           Setting up postfix-mysql (3.4.13-0ubuntu1.2) ...
711.           Adding mysql map entry to /etc/postfix/dynamicmaps.cf
712.           Setting up python3-dns (3.2.1-1) ...
713.           Setting up python3-spf (2.0.14-1) ...
714.           Setting up python3-spf-engine (2.9.2-1) ...
715.           Setting up postfix-policyd-spf-python (2.9.2-1) ...
716.           Processing triggers for man-db (2.9.1-1) ...
717.   exec  | DEBIAN_FRONTEND=dialog
718.  
719.   files | postfix/main.cf.twig => /etc/postfix/main.cf
720.   files | postfix/master.cf => /etc/postfix/master.cf
721.   files | postfix/header_checks => /etc/postfix/header_checks
722.   files | postfix/mysql-virtual-mailbox-domains.cf => /etc/postfix/mysql-virtual-mailbox-domains.cf
723.   files | postfix/mysql-virtual-mailbox-maps.cf => /etc/postfix/mysql-virtual-mailbox-maps.cf
724.   files | postfix/mysql-virtual-alias-maps.cf => /etc/postfix/mysql-virtual-alias-maps.cf
725.  
726.   exec  | echo "***HOSTNAME***" > /etc/mailname
727.   exec  | openssl dhparam -out /etc/postfix/dh512.pem 512
728.           Generating DH parameters, 512 bit long safe prime, generator 2
729.           This is going to take a long time
730.           .............................+..................................................................................+.................................+.............+......................+................+.............................+........................+.....+.+...+..............................++*++*++*++*++*
731.   exec  | openssl dhparam -out /etc/postfix/dh1024.pem 1024
732.           Generating DH parameters, 1024 bit long safe prime, generator 2
733.           This is going to take a long time
734.           .....................+......+...............+......................................................................+.....................+......................................+................................................................................................................+................................+.+...................................+..+.....+...............................................................................................................................................+................................................................................................................................................+...........................................................................+.....++*++*++*++*++*
735.   exec  | openssl dhparam -out /etc/postfix/dh2048.pem 2048
736.           Generating DH parameters, 2048 bit long safe prime, generator 2
737.           This is going to take a long time
738.           ..........................................+.................................................................................................................................................................................................+............+.......................................+....................................................................................................................................................................................................................................................................+...............+........................................+....................................................+......................................+.......................................................+..............+...........................................................+...................................................+...............................+..................................................................................................................................+.................................................+................+....................................+............................................................................................+............................+...................................................+..................................................................................................................................................................................+.............................................................+......................................................+...........................+....................+..................................+....................+..................+...........................................................................................................................................................+...........+.+.......+...........................................+........................................................+.....................................................................................................................................................................................................................................................................................+...................................................................+.+..................................+..................................................................+............................................................+.......................................+...+................+............................................................................................................................+.....................................................................................................+.............................+...........................+.......................................................+..............................................................................+................................................................+......................................................................+........................................+...........................+.............................................................................................................................+............................+...........................................................+..........................+.................................................................................................................................................+.......+.........................................................................................................................................................................................................................+.....................................................................................................................+................................+...........................................................................................................+...............................+..+...................................................................................................................+...........................................................................................................................................................................................................................................................................................................................................................+.......................+..........................................................+.........................................................................................................................+..................................................................................................................................................+.............................+........................................................................................................+......................................................+..................................................................................+......................................+...................................................................................+.+........................................................................................................................................................................................................................................................................................+..................................................................................................................................................................................................................+...................+.............................................................................+................................+.....................+........................+.....................+.......................................................+..............................+....................................+.................................................................................................................................................................................................................................+.......+..........................................................................................................................................................................+..........................................................................................................................................................................................+................++*++*++*++*
739.   exec  | chmod 0600 /etc/postfix/mysql-virtual-mailbox-domains.cf
740.   exec  | chmod 0600 /etc/postfix/mysql-virtual-mailbox-maps.cf
741.   exec  | chmod 0600 /etc/postfix/mysql-virtual-alias-maps.cf
742.   exec  | service postfix restart
743.  
744.  
745. ================================================================================
746.   Dovecot
747. ================================================================================
748.  
749.   exec  | /usr/share/debconf/fix_db.pl
750.   exec  | DEBIAN_FRONTEND=noninteractive apt-get install -y dovecot-core dovecot-common dovecot-mysql dovecot-sieve dovecot-managesieved dovecot-imapd dovecot-pop3d dovecot-lmtpd
751.           Reading package lists...
752.           Building dependency tree...
753.           Reading state information...
754.           dovecot-core is already the newest version (1:2.3.7.2-1ubuntu3.5).
755.           dovecot-imapd is already the newest version (1:2.3.7.2-1ubuntu3.5).
756.           dovecot-pop3d is already the newest version (1:2.3.7.2-1ubuntu3.5).
757.           dovecot-lmtpd is already the newest version (1:2.3.7.2-1ubuntu3.5).
758.           dovecot-managesieved is already the newest version (1:2.3.7.2-1ubuntu3.5).
759.           dovecot-mysql is already the newest version (1:2.3.7.2-1ubuntu3.5).
760.           dovecot-sieve is already the newest version (1:2.3.7.2-1ubuntu3.5).
761.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
762.   exec  | DEBIAN_FRONTEND=dialog
763.  
764.   files | dovecot/dovecot.conf.twig => /etc/dovecot/dovecot.conf
765.   files | dovecot/dovecot-sql.conf => /etc/dovecot/dovecot-sql.conf
766.  
767.   exec  | id -u vmail 2>&1 || useradd -u 5000 -d /var/mail vmail
768.           5000
769.   exec  | chown -R vmail:vmail /var/mail/
770.   exec  | chmod 0777 /var/mail
771.   exec  | chown -R vmail:dovecot /etc/dovecot/
772.   exec  | chmod -R o-rwx /etc/dovecot/
773.   exec  | service dovecot restart
774.  
775.  
776. ================================================================================
777.   OpenDKIM
778. ================================================================================
779.  
780.   exec  | apt-get -y install opendkim opendkim-tools
781.           Reading package lists...
782.           Building dependency tree...
783.           Reading state information...
784.           opendkim is already the newest version (2.11.0~beta2-1).
785.           opendkim-tools is already the newest version (2.11.0~beta2-1).
786.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
787.   exec  | mkdir -p -m 0755 /etc/opendkim/
788.   exec  | mkdir -p -m 0700 /etc/opendkim/keys
789.   exec  | touch /etc/opendkim/signing.table
790.   exec  | touch /etc/opendkim/key.table
791.  
792.   files | opendkim/opendkim.conf => /etc/opendkim.conf
793.   files | opendkim/trusted => /etc/opendkim/trusted
794.  
795.   exec  | chown -R opendkim:opendkim /etc/opendkim
796.  
797.  
798. ================================================================================
799.   Email protection
800. ================================================================================
801.  
802.   exec  | apt-get install -y amavis clamav clamav-daemon spamassassin pyzor razor
803.           Reading package lists...
804.           Building dependency tree...
805.           Reading state information...
806.           amavisd-new is already the newest version (1:2.11.0-6.1ubuntu1).
807.           pyzor is already the newest version (1:1.0.0-3).
808.           razor is already the newest version (1:2.85-4.2build5).
809.           clamav is already the newest version (0.103.2+dfsg-0ubuntu0.20.04.2).
810.           clamav-daemon is already the newest version (0.103.2+dfsg-0ubuntu0.20.04.2).
811.           spamassassin is already the newest version (3.4.4-1ubuntu1.1).
812.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
813.   exec  | mkdir -p -m 0755 /var/spool/spamassassin/
814.   exec  | chown amavis:amavis /var/spool/spamassassin/
815.  
816.   files | amavis/15-content_filter_mode => /etc/amavis/conf.d/15-content_filter_mode
817.   files | amavis/50-user => /etc/amavis/conf.d/50-user
818.   files | spamassassin/spamassassin => /etc/default/spamassassin
819.   files | spamassassin/local.cf => /etc/spamassassin/local.cf
820.  
821.   exec  | su - amavis -s /bin/bash -c 'razor-admin -create'
822.   exec  | su - amavis -s /bin/bash -c 'razor-admin -register'
823.           Register successful.  Identity stored in /var/lib/amavis/.razor/identity-ru3O-4_U5k
824.   exec  | usermod -aG amavis clamav
825.   exec  | usermod -aG clamav amavis
826.   exec  | chmod 0640 /etc/amavis/conf.d/50-user
827.   exec  | chown root:amavis /etc/amavis/conf.d/50-user
828.   exec  | service clamav-daemon restart
829.   exec  | service amavis restart
830.   exec  | service spamassassin restart
831.   exec  | systemctl enable spamassassin
832.           Synchronizing state of spamassassin.service with SysV service script with /lib/systemd/systemd-sysv-install.
833.           Executing: /lib/systemd/systemd-sysv-install enable spamassassin
834.   exec  | systemctl enable clamav-daemon
835.           Synchronizing state of clamav-daemon.service with SysV service script with /lib/systemd/systemd-sysv-install.
836.           Executing: /lib/systemd/systemd-sysv-install enable clamav-daemon
837.   exec  | grep "^\s*DatabaseCustomURL" /etc/clamav/freshclam.conf || echo "
838.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/junk.ndb
839.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/jurlbl.ndb
840.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/phish.ndb
841.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/rogue.hdb
842.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/sanesecurity.ftm
843.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/sigwhitelist.ign2
844.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/scam.ndb
845.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/spamimg.hdb
846.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/spamattach.hdb
847.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/blurl.ndb
848.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/foxhole_generic.cdb
849.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/foxhole_filename.cdb
850.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/malwarehash.hsb
851.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/hackingteam.hsb
852.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_malware.hdb
853.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_malware_links.ndb
854.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_extended_malware.hdb
855.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow.attachments.hdb
856.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_bad_cw.hdb
857.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_cracked_URL.ndb
858.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_malware_URL.ndb
859.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_phishing_URL.ndb
860.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_malware_attach.hdb
861.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/porcupine.ndb
862.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/phishtank.ndb
863.   DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/porcupine.hsb
864.   DatabaseCustomURL https://urlhaus.abuse.ch/downloads/urlhaus.ndb
865.   " >> /etc/clamav/freshclam.conf
866.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/junk.ndb
867.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/jurlbl.ndb
868.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/phish.ndb
869.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/rogue.hdb
870.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/sanesecurity.ftm
871.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/sigwhitelist.ign2
872.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/scam.ndb
873.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/spamimg.hdb
874.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/spamattach.hdb
875.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/blurl.ndb
876.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/foxhole_generic.cdb
877.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/foxhole_filename.cdb
878.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/malwarehash.hsb
879.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/hackingteam.hsb
880.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_malware.hdb
881.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_malware_links.ndb
882.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_extended_malware.hdb
883.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow.attachments.hdb
884.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/winnow_bad_cw.hdb
885.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_cracked_URL.ndb
886.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_malware_URL.ndb
887.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_phishing_URL.ndb
888.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/bofhland_malware_attach.hdb
889.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/porcupine.ndb
890.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/phishtank.ndb
891.           DatabaseCustomURL http://ftp.swin.edu.au/sanesecurity/porcupine.hsb
892.           DatabaseCustomURL https://urlhaus.abuse.ch/downloads/urlhaus.ndb
893.  
894.  
895. ================================================================================
896.   AWStats
897. ================================================================================
898.  
899.   exec  | apt-get install -y awstats
900.           Reading package lists...
901.           Building dependency tree...
902.           Reading state information...
903.           awstats is already the newest version (7.6+dfsg-2ubuntu0.20.04.1).
904.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
905.   exec  | rm -f /etc/cron.d/awstats
906.   exec  | rm -f /etc/awstats/awstats.conf
907.  
908.  
909. ================================================================================
910.   Fail2ban
911. ================================================================================
912.  
913.   exec  | apt-get install -y fail2ban
914.           Reading package lists...
915.           Building dependency tree...
916.           Reading state information...
917.           fail2ban is already the newest version (0.11.1-1).
918.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
919.  
920.   files | fail2ban/jail.d/keyhelp.local => /etc/fail2ban/jail.d/keyhelp.local
921.   files | fail2ban/filter.d/keyhelp-phpmyadmin.conf => /etc/fail2ban/filter.d/keyhelp-phpmyadmin.conf
922.  
923.   exec  | chown keyhelp:keyhelp /etc/fail2ban/jail.d/keyhelp.local
924.   exec  | service fail2ban restart
925.  
926.  
927. ================================================================================
928.   Logrotate
929. ================================================================================
930.  
931.   exec  | apt-get install -y logrotate
932.           Reading package lists...
933.           Building dependency tree...
934.           Reading state information...
935.           logrotate is already the newest version (3.14.0-4ubuntu3).
936.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
937.  
938.   files | logrotate/keyhelp => /etc/logrotate.d/keyhelp
939.   files | logrotate/logrotate.timer => /lib/systemd/system/logrotate.timer
940.   files | logrotate/logrotate.service => /lib/systemd/system/logrotate.service
941.  
942.   exec  | systemctl daemon-reload
943.  
944.  
945. ================================================================================
946.   PhpMyAdmin 5.1.1
947. ================================================================================
948.  
949.   exec  | rm -f /tmp/keyhelp_update/phpmyadmin.tar.gz
950.   exec  | rm -rf /home/keyhelp/www/phpmyadmin/*
951.   exec  | mkdir -p -m 0755 /tmp/keyhelp_update
952.   exec  | mkdir -p -m 0755 /home/keyhelp/www/phpmyadmin
953.   exec  | wget --no-verbose --no-check-certificate --prefer-family='ipv4' --output-document='/tmp/keyhelp_update/phpmyadmin.tar.gz' https://install.keyhelp.de/files/tools/phpmyadmin/phpMyAdmin-5.1.1-all-languages.tar.gz
954.           2022-01-14 20:03:33 URL:https://install.keyhelp.de/files/tools/phpmyadmin/phpMyAdmin-5.1.1-all-languages.tar.gz [13454066/13454066] -> "/tmp/keyhelp_update/phpmyadmin.tar.gz" [1]
955.   exec  | tar --strip 1 -xf /tmp/keyhelp_update/phpmyadmin.tar.gz -C /home/keyhelp/www/phpmyadmin
956.  
957.   files | phpmyadmin/config.inc.php => /home/keyhelp/www/phpmyadmin/config.inc.php
958.   files | phpmyadmin/.htaccess => /home/keyhelp/www/phpmyadmin/.htaccess
959.   files | phpmyadmin/.htaccess_deny => /home/keyhelp/www/phpmyadmin/libraries/.htaccess
960.  
961.   db    | DROP DATABASE IF EXISTS `phpmyadmin`
962.   db    | CREATE DATABASE `phpmyadmin`
963.   db    | GRANT SELECT,INSERT,UPDATE,DELETE ON phpmyadmin.* TO 'phpmyadmin'@'localhost' IDENTIFIED BY '***PMA_PASS***'
964.   db    | FLUSH PRIVILEGES
965.  
966.   exec  | rm -rf /home/keyhelp/www/phpmyadmin/setup
967.   exec  | chmod 0600 /home/keyhelp/www/phpmyadmin/config.inc.php
968.   exec  | chown -R keyhelp:keyhelp /home/keyhelp/www/phpmyadmin
969.  
970.   import | /home/keyhelp/www/phpmyadmin/sql/create_tables.sql => phpmyadmin
971.  
972.  
973. ================================================================================
974.   Adminer 4.8.1
975. ================================================================================
976.  
977.   exec  | rm -f /tmp/keyhelp_update/adminer.tar.gz
978.   exec  | rm -rf /home/keyhelp/www/adminer/*
979.   exec  | mkdir -p -m 0755 /tmp/keyhelp_update
980.   exec  | mkdir -p -m 0755 /home/keyhelp/www/adminer
981.   exec  | wget --no-verbose --no-check-certificate --prefer-family='ipv4' --output-document='/tmp/keyhelp_update/adminer.tar.gz' https://install.keyhelp.de/files/tools/adminer/adminer-4.8.1.tar.gz
982.           2022-01-14 20:03:34 URL:https://install.keyhelp.de/files/tools/adminer/adminer-4.8.1.tar.gz [432863/432863] -> "/tmp/keyhelp_update/adminer.tar.gz" [1]
983.   exec  | tar --strip 1 -xzf /tmp/keyhelp_update/adminer.tar.gz -C /home/keyhelp/www/adminer
984.   exec  | rm -rf /home/keyhelp/www/adminer/setup
985.   exec  | chown -R keyhelp:keyhelp /home/keyhelp/www/adminer
986.  
987.  
988. ================================================================================
989.   Roundcube 1.5.1 Multilanguage
990. ================================================================================
991.  
992.   exec  | rm -rf /home/keyhelp/www/roundcube/*
993.   exec  | rm --force /tmp/keyhelp_update/roundcube.tar.gz
994.   exec  | mkdir --parents --mode 0755 /tmp/keyhelp_update/
995.   exec  | mkdir --parents --mode 0755 /home/keyhelp/www/roundcube
996.   exec  | wget --no-verbose --no-check-certificate --prefer-family='ipv4' --output-document='/tmp/keyhelp_update/roundcube.tar.gz' https://install.keyhelp.de/files/tools/roundcube/roundcubemail-1.5.1.tar.gz
997.           2022-01-14 20:03:34 URL:https://install.keyhelp.de/files/tools/roundcube/roundcubemail-1.5.1.tar.gz [7827081/7827081] -> "/tmp/keyhelp_update/roundcube.tar.gz" [1]
998.   exec  | tar --strip 1 -xf /tmp/keyhelp_update/roundcube.tar.gz -C /home/keyhelp/www/roundcube
999.   exec  | mkdir --parents --mode 0755 /home/keyhelp/www/roundcube/plugins/keyhelp_sync_identities
1000.  
1001.   files | roundcube/config.inc.php => /home/keyhelp/www/roundcube/config/config.inc.php
1002.   files | roundcube/plugins/managesieve/config.inc.php => /home/keyhelp/www/roundcube/plugins/managesieve/config.inc.php
1003.   files | roundcube/plugins/password/config.inc.php => /home/keyhelp/www/roundcube/plugins/password/config.inc.php
1004.   files | roundcube/plugins/keyhelp_sync_identities/keyhelp_sync_identities.php => /home/keyhelp/www/roundcube/plugins/keyhelp_sync_identities/keyhelp_sync_identities.php
1005.   files | roundcube/plugins/keyhelp_sync_identities/composer.json => /home/keyhelp/www/roundcube/plugins/keyhelp_sync_identities/composer.json
1006.  
1007.   db    | DROP DATABASE IF EXISTS `roundcube`
1008.   db    | CREATE DATABASE `roundcube`
1009.   db    | GRANT ALL PRIVILEGES ON roundcube.* TO 'roundcube'@'localhost' IDENTIFIED BY '***RC_PASS***'
1010.   db    | FLUSH PRIVILEGES
1011.  
1012.   exec  | chmod 0600 /home/keyhelp/www/roundcube/plugins/password/config.inc.php
1013.   exec  | chmod 0600 /home/keyhelp/www/roundcube/config/config.inc.php
1014.   exec  | chown -R keyhelp:keyhelp /home/keyhelp/www/roundcube
1015.  
1016.   import | /home/keyhelp/www/roundcube/SQL/mysql.initial.sql => roundcube
1017.  
1018.  
1019. ================================================================================
1020.   Rainloop 1.16.0 (Community Edition)
1021. ================================================================================
1022.  
1023.   exec  | rm -rf /home/keyhelp/www/rainloop/*
1024.   exec  | rm --force /tmp/keyhelp_update/rainloop.tar.gz
1025.   exec  | mkdir --parents --mode 0755 /tmp/keyhelp_update/
1026.   exec  | mkdir --parents --mode 0755 /home/keyhelp/www/rainloop
1027.   exec  | wget --no-verbose --no-check-certificate --prefer-family='ipv4' --output-document='/tmp/keyhelp_update/rainloop.tar.gz' https://install.keyhelp.de/files/tools/rainloop/rainloop-community-1.16.0.tar.gz
1028.           2022-01-14 20:03:35 URL:https://install.keyhelp.de/files/tools/rainloop/rainloop-community-1.16.0.tar.gz [5999866/5999866] -> "/tmp/keyhelp_update/rainloop.tar.gz" [1]
1029.   exec  | tar -xf /tmp/keyhelp_update/rainloop.tar.gz -C /home/keyhelp/www/rainloop
1030.   exec  | find /home/keyhelp/www/rainloop -type d -exec chmod 0755 {} \;
1031.   exec  | find /home/keyhelp/www/rainloop -type f -exec chmod 0644 {} \;
1032.   exec  | mkdir --parents --mode 0755 /home/keyhelp/www/rainloop/data/_data_/_default_/configs/
1033.   exec  | mkdir --parents --mode 0755 /home/keyhelp/www/rainloop/rainloop/v/1.16.0/app/domains
1034.   exec  | mkdir --parents --mode 0755 /home/keyhelp/www/rainloop/data/_data_/_default_/plugins/change-password-custom-sql/
1035.  
1036.   files | rainloop/application.ini => /home/keyhelp/www/rainloop/data/_data_/_default_/configs/application.ini
1037.   files | rainloop/default.ini => /home/keyhelp/www/rainloop/rainloop/v/1.16.0/app/domains/default.ini
1038.   files | rainloop/change-password-custom-sql/ChangePasswordCustomSqlDriver.php => /home/keyhelp/www/rainloop/data/_data_/_default_/plugins/change-password-custom-sql/ChangePasswordCustomSqlDriver.php
1039.   files | rainloop/change-password-custom-sql/index.php => /home/keyhelp/www/rainloop/data/_data_/_default_/plugins/change-password-custom-sql/index.php
1040.   files | rainloop/change-password-custom-sql/plugin-change-password-custom-sql.ini => /home/keyhelp/www/rainloop/data/_data_/_default_/configs/plugin-change-password-custom-sql.ini
1041.   files | rainloop/.htaccess_deny => /home/keyhelp/www/rainloop/data/.htaccess
1042.  
1043.   db    | DROP DATABASE IF EXISTS `rainloop`
1044.   db    | CREATE DATABASE `rainloop`
1045.   db    | GRANT ALL PRIVILEGES ON rainloop.* TO 'rainloop'@'localhost' IDENTIFIED BY '***RL_PASS***'
1046.   db    | FLUSH PRIVILEGES
1047.  
1048.   exec  | chmod 0600 /home/keyhelp/www/rainloop/data/_data_/_default_/configs/application.ini
1049.   exec  | chmod 0600 /home/keyhelp/www/rainloop/data/_data_/_default_/configs/plugin-change-password-custom-sql.ini
1050.   exec  | chown -R keyhelp:keyhelp /home/keyhelp/www/rainloop
1051.  
1052.  
1053. ================================================================================
1054.   Quota
1055. ================================================================================
1056.  
1057.   exec  | apt-get install -y quota quotatool
1058.           Reading package lists...
1059.           Building dependency tree...
1060.           Reading state information...
1061.           quota is already the newest version (4.05-1).
1062.           quotatool is already the newest version (1:1.6.2-5fakesync1).
1063.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1064.   exec  | service quota stop
1065.   exec  | cp /etc/fstab /etc/fstab-backup
1066.   exec  | echo "LABEL=cloudimg-rootfs     /     ext4     defaults,usrquota,grpquota     0     1
1067.   LABEL=UEFI    /boot/efi       vfat    umask=0077      0 1
1068.  
1069.   # CLOUD_IMG: This file was created/modified by the Cloud Image build process
1070.   ######################################
1071.   ## ORACLE CLOUD INFRASTRUCTURE CUSTOMERS
1072.   ##
1073.   ## If you are adding an iSCSI remote block volume to this file you MUST
1074.   ## include the '_netdev' mount option or your instance will become
1075.   ## unavailable after the next reboot.
1076.   ## SCSI device names are not stable across reboots; please use the device UUID
1077.   ## instead of /dev path.
1078.   ##
1079.   ## Example:
1080.   ## UUID=94c5aade-8bb1-4d55-ad0c-388bb8aa716a /data1 ext4 defaults,noatime,_netdev 0 2
1081.   ##
1082.   ## More information:
1083.   ## https://docs.us-phoenix-1.oraclecloud.com/Content/Block/Tasks/connectingtoavolume.htm
1084.   ##" > "/etc/fstab"
1085.   exec  | mount -o remount /
1086.   exec  | quotacheck -avmug
1087.           quotacheck: Your kernel probably supports journaled quota but you are not using it. Consider switching to journaled quota to avoid running quotacheck after an unclean shutdown.
1088.           quotacheck: Quota for users is enabled on mountpoint / so quotacheck might damage the file.
1089.           Please turn quotas off or use -f to force checking.
1090.  
1091.   >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
1092.   >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> ERROR DETECTED <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
1093.   <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
1094.  
1095.   [SKIPPED DUE PREVIOUS ERRORS] exec  | service quota start
1096.  
1097.  
1098. ================================================================================
1099.   Apparmor
1100. ================================================================================
1101.  
1102.   exec  | apt-get install -y apparmor
1103.           Reading package lists...
1104.           Building dependency tree...
1105.           Reading state information...
1106.           apparmor is already the newest version (2.13.3-7ubuntu5.1).
1107.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1108.  
1109.  
1110. ================================================================================
1111.   7-zip
1112. ================================================================================
1113.  
1114.   exec  | apt-get install -y p7zip-full
1115.           Reading package lists...
1116.           Building dependency tree...
1117.           Reading state information...
1118.           p7zip-full is already the newest version (16.02+dfsg-7build1).
1119.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1120.  
1121.  
1122. ================================================================================
1123.   Hide LTS notice
1124. ================================================================================
1125.  
1126.   files | update-manager/release-upgrades => /etc/update-manager/release-upgrades
1127.  
1128.   exec  | rm -f /var/lib/update-notifier/release-upgrade-available
1129.  
1130.  
1131. ================================================================================
1132.   Update message of the day
1133. ================================================================================
1134.  
1135.   files | motd/80-keyhelp => /etc/update-motd.d/80-keyhelp
1136.  
1137.   exec  | chmod +x /etc/update-motd.d/80-keyhelp
1138.  
1139.  
1140. ================================================================================
1141.   Nano
1142. ================================================================================
1143.  
1144.   exec  | apt-get install -y nano
1145.           Reading package lists...
1146.           Building dependency tree...
1147.           Reading state information...
1148.           nano is already the newest version (4.8-1ubuntu1).
1149.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1150.  
1151.  
1152. ================================================================================
1153.   Curl
1154. ================================================================================
1155.  
1156.   exec  | apt-get install -y curl
1157.           Reading package lists...
1158.           Building dependency tree...
1159.           Reading state information...
1160.           curl is already the newest version (7.68.0-1ubuntu2.7).
1161.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1162.  
1163.  
1164. ================================================================================
1165.   Cron daemon
1166. ================================================================================
1167.  
1168.   exec  | apt-get install -y cron
1169.           Reading package lists...
1170.           Building dependency tree...
1171.           Reading state information...
1172.           cron is already the newest version (3.0pl1-136ubuntu1).
1173.           0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1174.  
1175.   files | cron/keyhelp => /etc/cron.d/keyhelp
1176.   files | cron/keyhelp-sa-learn => /etc/cron.d/keyhelp-sa-learn
1177.   files | cron/keyhelp-firewall => /etc/cron.d/keyhelp-firewall
1178.  
1179.   exec  | chmod 0644 /etc/cron.d/keyhelp
1180.   exec  | chmod 0644 /etc/cron.d/keyhelp-sa-learn
1181.  
1182.  
1183. ################################################################################
1184. ################################################################################
1185.  
1186. => Errors occurred during installation. <=
1187.  
1188. Finished install: 2022-01-14 20:03:41
1189. Duration: 116 second(s)
1190. ubuntu@ch1:~$
1191.