Add automated 1-click install script and FreePBX-style terminal login banner
This commit is contained in:
sorcier committed
1 parent
c5de8d0c71
commit
502543e134
4 files changed
+463
-123
No files matched your search
@@ -76,16 +76,39 @@ nexus-pbx/
|
|||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## ⚙️ Prérequis & Installation
|
## ⚙️ Prérequis & Installation en 1 Clic
|
||||||
|
|
||||||
- **Système d'exploitation** : Debian 12 (Bookworm) ou Debian 13 (Trixie).
|
- **Systèmes supportés** : Debian 12 (Bookworm), Debian 13 (Trixie), Ubuntu Server 22.04 / 24.04.
|
||||||
- **Paquets requis** : Asterisk 20+, PHP 8.2+, Nginx, SQLite3, Fail2ban, Certbot.
|
- **Architecture** : x86_64 / amd64 ou arm64.
|
||||||
|
|
||||||
Pour déployer sur une machine fraîche :
|
### ⚡ Installation Automatique (Recommandée)
|
||||||
|
Sur votre serveur Debian/Ubuntu fraîchement installé, exécutez simplement cette commande en tant que **root** :
|
||||||
```bash
|
```bash
|
||||||
sudo bash scripts/setup-debian.sh
|
bash <(curl -sSL https://git.sorcier-research.com/sorcier/NexusPBX/raw/branch/main/install.sh)
|
||||||
```
|
```
|
||||||
|
|
||||||
|
### 📦 Méthode Alternative (Clonage Manuel)
|
||||||
|
```bash
|
||||||
|
git clone https://git.sorcier-research.com/sorcier/NexusPBX.git /var/www/nexus-pbx
|
||||||
|
cd /var/www/nexus-pbx
|
||||||
|
sudo bash install.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 🔑 Première Connexion & Administration
|
||||||
|
|
||||||
|
Une fois l'installation terminée, la bannière console s'affiche sur votre terminal avec l'adresse IP détectée.
|
||||||
|
Ouvrez votre navigateur web sur :
|
||||||
|
- **HTTP** : `http://<IP_DU_SERVEUR>`
|
||||||
|
- **HTTPS** : `https://<IP_DU_SERVEUR>:8443`
|
||||||
|
|
||||||
|
**Identifiants d'administration par défaut :**
|
||||||
|
- **Nom d'utilisateur** : `admin`
|
||||||
|
- **Mot de passe** : `admin123`
|
||||||
|
|
||||||
|
*(Il vous est fortement recommandé de changer le mot de passe dès votre première connexion).*
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## 🔒 Confidentialité & Sécurité du Dépôt
|
## 🔒 Confidentialité & Sécurité du Dépôt
|
||||||
|
|||||||
Executable
+335
@@ -0,0 +1,335 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# ==============================================================================
|
||||||
|
# NexusPBX - Script d'Installation & Configuration Tout-en-Un (Debian / Ubuntu)
|
||||||
|
# ==============================================================================
|
||||||
|
# Utilisation rapide sur une machine vierge :
|
||||||
|
# bash <(curl -sSL https://git.sorcier-research.com/sorcier/NexusPBX/raw/branch/main/install.sh)
|
||||||
|
# Ou après clonage :
|
||||||
|
# cd /var/www/nexus-pbx && bash install.sh
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# Couleurs pour l'affichage de l'installation
|
||||||
|
C_GREEN="\033[1;32m"
|
||||||
|
C_CYAN="\033[1;36m"
|
||||||
|
C_YELLOW="\033[1;33m"
|
||||||
|
C_RED="\033[1;31m"
|
||||||
|
C_RESET="\033[0m"
|
||||||
|
|
||||||
|
echo -e "${C_CYAN}"
|
||||||
|
cat << "BANNER"
|
||||||
|
_ _ ____ ______ __ __
|
||||||
|
| \ | | _____ ___ _ ___ | _ \| __ ) \ \/ /
|
||||||
|
| \| |/ _ \ \/ / | | / __| | |_) | _ \ \ /
|
||||||
|
| |\ | __/> <| |_| \__ \ | __/| |_) | / \
|
||||||
|
|_| \_|\___/_/\_\\__,_|___/ |_| |____/ /_/\_\
|
||||||
|
|
||||||
|
Installation & Déploiement Automatisé
|
||||||
|
BANNER
|
||||||
|
echo -e "${C_RESET}"
|
||||||
|
|
||||||
|
# 1. Vérification des droits root
|
||||||
|
if [ "$(id -u)" -ne 0 ]; then
|
||||||
|
echo -e "${C_RED}[ERREUR] Ce script d'installation doit être exécuté en tant que root (sudo).${C_RESET}"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
export DEBIAN_FRONTEND=noninteractive
|
||||||
|
|
||||||
|
# 2. Mise à jour des dépôts APT et installation des dépendances système
|
||||||
|
echo -e "${C_GREEN}[1/8] Mise à jour des paquets et installation des dépendances...${C_RESET}"
|
||||||
|
apt-get update -y
|
||||||
|
|
||||||
|
# Outils système essentiels
|
||||||
|
apt-get install -y --no-install-recommends \
|
||||||
|
curl \
|
||||||
|
wget \
|
||||||
|
git \
|
||||||
|
sudo \
|
||||||
|
sqlite3 \
|
||||||
|
cron \
|
||||||
|
net-tools \
|
||||||
|
openssl \
|
||||||
|
ca-certificates \
|
||||||
|
iptables \
|
||||||
|
iptables-persistent
|
||||||
|
|
||||||
|
# Asterisk et banques de sons françaises
|
||||||
|
apt-get install -y --no-install-recommends \
|
||||||
|
asterisk \
|
||||||
|
asterisk-core-sounds-fr-wav \
|
||||||
|
asterisk-core-sounds-fr-g722 \
|
||||||
|
asterisk-sounds-main || true
|
||||||
|
|
||||||
|
# Nginx, PHP-FPM et extensions requises
|
||||||
|
apt-get install -y --no-install-recommends \
|
||||||
|
nginx \
|
||||||
|
php-fpm \
|
||||||
|
php-sqlite3 \
|
||||||
|
php-curl \
|
||||||
|
php-xml \
|
||||||
|
php-mbstring \
|
||||||
|
php-zip \
|
||||||
|
php-cli
|
||||||
|
|
||||||
|
# Sécurité (Fail2ban & Certbot)
|
||||||
|
apt-get install -y --no-install-recommends \
|
||||||
|
fail2ban \
|
||||||
|
certbot \
|
||||||
|
python3-certbot-nginx
|
||||||
|
|
||||||
|
# 3. Déploiement / Clonage du code source NexusPBX
|
||||||
|
echo -e "${C_GREEN}[2/8] Préparation et déploiement des fichiers NexusPBX...${C_RESET}"
|
||||||
|
TARGET_DIR="/var/www/nexus-pbx"
|
||||||
|
|
||||||
|
if [ -d "$TARGET_DIR/.git" ]; then
|
||||||
|
echo " -> Dépôt NexusPBX déjà présent dans $TARGET_DIR, mise à jour..."
|
||||||
|
cd "$TARGET_DIR"
|
||||||
|
git config --global --add safe.directory "$TARGET_DIR" 2>/dev/null || true
|
||||||
|
elif [ -d "$PWD/public" ] && [ -d "$PWD/src" ]; then
|
||||||
|
echo " -> Exécution depuis le dossier source, synchronisation vers $TARGET_DIR..."
|
||||||
|
if [ "$PWD" != "$TARGET_DIR" ]; then
|
||||||
|
mkdir -p "$TARGET_DIR"
|
||||||
|
cp -a . "$TARGET_DIR/"
|
||||||
|
cd "$TARGET_DIR"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo " -> Clonage du dépôt public officiel depuis https://git.sorcier-research.com..."
|
||||||
|
rm -rf "$TARGET_DIR"
|
||||||
|
git clone https://git.sorcier-research.com/sorcier/NexusPBX.git "$TARGET_DIR"
|
||||||
|
cd "$TARGET_DIR"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 4. Configuration des utilisateurs, groupes et arborescence de stockage
|
||||||
|
echo -e "${C_GREEN}[3/8] Configuration des permissions et de l'arborescence...${C_RESET}"
|
||||||
|
usermod -aG asterisk www-data 2>/dev/null || true
|
||||||
|
usermod -aG www-data asterisk 2>/dev/null || true
|
||||||
|
|
||||||
|
# Création des dossiers nécessaires
|
||||||
|
mkdir -p "$TARGET_DIR/storage/backups"
|
||||||
|
mkdir -p "$TARGET_DIR/storage/system_backups"
|
||||||
|
mkdir -p "$TARGET_DIR/storage/sounds"
|
||||||
|
mkdir -p "$TARGET_DIR/public/avatars"
|
||||||
|
mkdir -p /etc/asterisk/keys
|
||||||
|
mkdir -p /var/lib/asterisk/sounds/custom
|
||||||
|
mkdir -p /var/spool/asterisk/voicemail/default
|
||||||
|
mkdir -p /var/log/nexus-pbx
|
||||||
|
|
||||||
|
# Droits applicatifs stricts
|
||||||
|
chown -R www-data:asterisk "$TARGET_DIR"
|
||||||
|
chmod 2775 "$TARGET_DIR/storage" \
|
||||||
|
"$TARGET_DIR/storage/backups" \
|
||||||
|
"$TARGET_DIR/storage/system_backups" \
|
||||||
|
"$TARGET_DIR/storage/sounds" \
|
||||||
|
"$TARGET_DIR/public/avatars"
|
||||||
|
|
||||||
|
chown -R asterisk:asterisk /etc/asterisk /var/lib/asterisk /var/spool/asterisk /var/log/asterisk
|
||||||
|
chmod 2775 /etc/asterisk
|
||||||
|
chmod 2750 /etc/asterisk/keys
|
||||||
|
|
||||||
|
# Droits sudoers pour l'interface web (www-data)
|
||||||
|
cat << 'EOF' > /etc/sudoers.d/nexus-pbx
|
||||||
|
# Privilèges spécifiques NexusPBX pour l'utilisateur Web www-data
|
||||||
|
www-data ALL=(ALL) NOPASSWD: /usr/sbin/asterisk, /usr/sbin/nginx, /usr/bin/systemctl, /usr/bin/fail2ban-client, /var/www/nexus-pbx/scripts/nexus-firewall, /usr/bin/certbot, /usr/sbin/nft, /usr/sbin/iptables
|
||||||
|
EOF
|
||||||
|
chmod 0440 /etc/sudoers.d/nexus-pbx
|
||||||
|
|
||||||
|
# 5. Configuration d'Asterisk & Certificats TLS de secours
|
||||||
|
echo -e "${C_GREEN}[4/8] Configuration du moteur Asterisk PJSIP & AMI...${C_RESET}"
|
||||||
|
|
||||||
|
# AMI Manager
|
||||||
|
cat << 'EOF' > /etc/asterisk/manager.conf
|
||||||
|
[general]
|
||||||
|
enabled = yes
|
||||||
|
port = 5038
|
||||||
|
bindaddr = 127.0.0.1
|
||||||
|
displayconnects = no
|
||||||
|
timestampevents = yes
|
||||||
|
|
||||||
|
[pbxgui]
|
||||||
|
secret = AsteriskAmi2026!
|
||||||
|
deny = 0.0.0.0/0.0.0.0
|
||||||
|
permit = 127.0.0.1/255.255.255.0
|
||||||
|
read = all
|
||||||
|
write = all
|
||||||
|
EOF
|
||||||
|
chown asterisk:asterisk /etc/asterisk/manager.conf
|
||||||
|
chmod 0640 /etc/asterisk/manager.conf
|
||||||
|
|
||||||
|
# Certificat TLS auto-signé initial pour PJSIP TLS (port 5061) et Nginx HTTPS (port 8443)
|
||||||
|
if [ ! -f /etc/asterisk/keys/asterisk.crt ] || [ ! -f /etc/asterisk/keys/asterisk.key ]; then
|
||||||
|
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
|
||||||
|
-keyout /etc/asterisk/keys/asterisk.key \
|
||||||
|
-out /etc/asterisk/keys/asterisk.crt \
|
||||||
|
-subj "/C=FR/ST=IDF/L=Paris/O=NexusPBX/CN=pbx.local" 2>/dev/null
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ! -f /etc/asterisk/keys/active_cert.crt ]; then
|
||||||
|
cp -f /etc/asterisk/keys/asterisk.crt /etc/asterisk/keys/active_cert.crt
|
||||||
|
cp -f /etc/asterisk/keys/asterisk.key /etc/asterisk/keys/active_key.key
|
||||||
|
fi
|
||||||
|
|
||||||
|
chown asterisk:asterisk /etc/asterisk/keys/*
|
||||||
|
chmod 0640 /etc/asterisk/keys/*
|
||||||
|
|
||||||
|
# Inclusions custom dans Asterisk
|
||||||
|
touch /etc/asterisk/pjsip.custom.conf /etc/asterisk/extensions.custom.conf
|
||||||
|
if ! grep -q 'pjsip.custom.conf' /etc/asterisk/pjsip.conf 2>/dev/null; then
|
||||||
|
printf '\n#tryinclude "pjsip.custom.conf"\n' >> /etc/asterisk/pjsip.conf
|
||||||
|
fi
|
||||||
|
if ! grep -q 'extensions.custom.conf' /etc/asterisk/extensions.conf 2>/dev/null; then
|
||||||
|
printf '\n#tryinclude "extensions.custom.conf"\n' >> /etc/asterisk/extensions.conf
|
||||||
|
fi
|
||||||
|
chown asterisk:asterisk /etc/asterisk/pjsip* /etc/asterisk/extensions*
|
||||||
|
chmod 0664 /etc/asterisk/pjsip.conf /etc/asterisk/extensions.conf 2>/dev/null || true
|
||||||
|
chmod 0660 /etc/asterisk/*.custom.conf 2>/dev/null || true
|
||||||
|
|
||||||
|
# 6. Initialisation de la Base de données SQLite & Configuration initiale
|
||||||
|
echo -e "${C_GREEN}[5/8] Initialisation de la base SQLite et configuration NexusPBX...${C_RESET}"
|
||||||
|
|
||||||
|
php -r '
|
||||||
|
require_once "/var/www/nexus-pbx/src/Database.php";
|
||||||
|
require_once "/var/www/nexus-pbx/src/ConfigGenerator.php";
|
||||||
|
require_once "/var/www/nexus-pbx/src/PhonebookManager.php";
|
||||||
|
require_once "/var/www/nexus-pbx/src/FirewallManager.php";
|
||||||
|
|
||||||
|
$db = App\Database::getConnection();
|
||||||
|
|
||||||
|
// Détection de l interface et du sous-réseau local primaire
|
||||||
|
$localNet = "192.168.1.0/24";
|
||||||
|
$ipOut = shell_exec("ip -o -4 route show to default 2>/dev/null | awk \"{print \\\$5}\"");
|
||||||
|
$dev = trim((string)$ipOut);
|
||||||
|
if ($dev !== "") {
|
||||||
|
$cidrOut = shell_exec("ip -o -4 addr show dev " . escapeshellarg($dev) . " | awk \"{print \\\$4}\" | head -n 1");
|
||||||
|
$cidr = trim((string)$cidrOut);
|
||||||
|
if ($cidr !== "") {
|
||||||
|
$parts = explode("/", $cidr);
|
||||||
|
$ip = $parts[0] ?? "";
|
||||||
|
$mask = (int)($parts[1] ?? 24);
|
||||||
|
if ($mask >= 16 && $mask <= 24) {
|
||||||
|
$longIp = ip2long($ip);
|
||||||
|
$longMask = ~((1 << (32 - $mask)) - 1);
|
||||||
|
$netIp = long2ip($longIp & $longMask);
|
||||||
|
$localNet = "{$netIp}/{$mask}";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Mise à jour sécurisée des paramètres initiaux
|
||||||
|
$st = $db->query("SELECT * FROM settings WHERE id = 1")->fetch(PDO::FETCH_ASSOC);
|
||||||
|
if ($st) {
|
||||||
|
$db->prepare("UPDATE settings SET local_net = :net, local_networks_json = :nets WHERE id = 1")->execute([
|
||||||
|
":net" => $localNet,
|
||||||
|
":nets" => json_encode([$localNet, "127.0.0.1/32"]),
|
||||||
|
]);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Génération initiale de pjsip.conf et extensions.conf
|
||||||
|
App\ConfigGenerator::generateAndApply($db);
|
||||||
|
|
||||||
|
// Initialisation de l annuaire et synchronisation
|
||||||
|
App\PhonebookManager::initDirectory();
|
||||||
|
App\PhonebookManager::syncExtensions($db);
|
||||||
|
'
|
||||||
|
|
||||||
|
chown -R www-data:asterisk "$TARGET_DIR/storage"
|
||||||
|
chmod 0660 "$TARGET_DIR"/storage/*.sqlite* 2>/dev/null || true
|
||||||
|
|
||||||
|
# 7. Configuration de Nginx et Fail2ban
|
||||||
|
echo -e "${C_GREEN}[6/8] Configuration du serveur Web Nginx et de Fail2ban...${C_RESET}"
|
||||||
|
|
||||||
|
# Détection de la socket PHP-FPM
|
||||||
|
PHP_SOCK=$(find /run/php/ -name "php*-fpm.sock" 2>/dev/null | head -n 1)
|
||||||
|
if [ -z "$PHP_SOCK" ]; then
|
||||||
|
PHP_SOCK="/run/php/php8.4-fpm.sock"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Application de la configuration Nginx complète (Ports 80, 8080, 8443)
|
||||||
|
php -r '
|
||||||
|
require_once "/var/www/nexus-pbx/src/Database.php";
|
||||||
|
require_once "/var/www/nexus-pbx/src/FirewallManager.php";
|
||||||
|
$db = App\Database::getConnection();
|
||||||
|
$st = $db->query("SELECT admin_https_port, certbot_strict_port80 FROM settings WHERE id = 1")->fetch(PDO::FETCH_ASSOC);
|
||||||
|
App\FirewallManager::applyNginxConfig((int)($st["admin_https_port"] ?? 8443), (int)($st["certbot_strict_port80"] ?? 0));
|
||||||
|
'
|
||||||
|
|
||||||
|
rm -f /etc/nginx/sites-enabled/default
|
||||||
|
ln -sf /etc/nginx/sites-available/nexus-pbx /etc/nginx/sites-enabled/nexus-pbx
|
||||||
|
|
||||||
|
# Filtre Fail2ban Asterisk
|
||||||
|
cat << 'EOF' > /etc/fail2ban/filter.d/asterisk.conf
|
||||||
|
[Definition]
|
||||||
|
failregex = ^(%(__prefix_line)s|\[\]\s*)*(?:NOTICE|SECURITY)\[\d+\]:? (?:\S+: )?(?:Registration from |Call from |Invalid password for |Sending fake auth challenge to |No matching endpoint found for )?'?<HOST>(?::\d+)?'?
|
||||||
|
^(%(__prefix_line)s|\[\]\s*)*SECURITY\[\d+\]:? (?:\S+: )?SecurityEvent="(?:FailedACL|InvalidAccountID|ChallengeResponseFailed|InvalidPassword|AuthFailed)"(?:.*?)RemoteAddress="IPV[46]/(?:UDP|TCP|TLS)/<HOST>/\d+"
|
||||||
|
ignoreregex =
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Jails Fail2ban
|
||||||
|
cat << 'EOF' > /etc/fail2ban/jail.local
|
||||||
|
[DEFAULT]
|
||||||
|
bantime = 3600
|
||||||
|
findtime = 600
|
||||||
|
maxretry = 3
|
||||||
|
ignoreip = 127.0.0.1/8 ::1 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
|
||||||
|
|
||||||
|
[asterisk]
|
||||||
|
enabled = true
|
||||||
|
port = 5060,5061
|
||||||
|
protocol = udp
|
||||||
|
filter = asterisk
|
||||||
|
logpath = /var/log/asterisk/messages
|
||||||
|
action = %(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
|
||||||
|
maxretry = 3
|
||||||
|
bantime = 3600
|
||||||
|
|
||||||
|
[nginx-http-auth]
|
||||||
|
enabled = true
|
||||||
|
port = http,https,8443
|
||||||
|
logpath = /var/log/nginx/*error.log
|
||||||
|
maxretry = 5
|
||||||
|
bantime = 3600
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# 8. Crontab & Bannière d'accueil Console (Style FreePBX)
|
||||||
|
echo -e "${C_GREEN}[7/8] Mise en place des tâches programmées et de la bannière console...${C_RESET}"
|
||||||
|
|
||||||
|
# Cron sauvegarde automatique toutes les 10 minutes
|
||||||
|
cat << 'EOF' > /etc/cron.d/nexus-backup
|
||||||
|
# Sauvegardes programmées automatiques NexusPBX
|
||||||
|
*/10 * * * * www-data /usr/bin/php /var/www/nexus-pbx/scripts/nexus_autobackup.php >> /var/log/nexus_backup.log 2>&1
|
||||||
|
EOF
|
||||||
|
chmod 0644 /etc/cron.d/nexus-backup
|
||||||
|
touch /var/log/nexus_backup.log && chown www-data:asterisk /var/log/nexus_backup.log && chmod 664 /var/log/nexus_backup.log
|
||||||
|
|
||||||
|
# CLI symlinks
|
||||||
|
chmod +x "$TARGET_DIR/scripts/nexus-firewall" "$TARGET_DIR/scripts/nexus-banner.sh"
|
||||||
|
ln -sf "$TARGET_DIR/scripts/nexus-firewall" /usr/local/bin/nexus-firewall
|
||||||
|
ln -sf "$TARGET_DIR/scripts/nexus-banner.sh" /usr/local/bin/nexus-banner
|
||||||
|
|
||||||
|
# Bannière interactive lors de chaque connexion terminal (SSH / Console)
|
||||||
|
cat << 'EOF' > /etc/profile.d/nexus-motd.sh
|
||||||
|
#!/bin/sh
|
||||||
|
if [ -x /usr/local/bin/nexus-banner ]; then
|
||||||
|
/usr/local/bin/nexus-banner
|
||||||
|
fi
|
||||||
|
EOF
|
||||||
|
chmod +x /etc/profile.d/nexus-motd.sh
|
||||||
|
|
||||||
|
# 9. Activation et redémarrage de tous les services
|
||||||
|
echo -e "${C_GREEN}[8/8] Démarrage et activation des services système...${C_RESET}"
|
||||||
|
systemctl daemon-reload
|
||||||
|
|
||||||
|
# Redémarrage PHP-FPM
|
||||||
|
PHP_SVC=$(systemctl list-unit-files --type=service | grep -E "php.*-fpm" | awk '{print $1}' | head -n 1 || echo "php8.4-fpm")
|
||||||
|
systemctl restart "$PHP_SVC" && systemctl enable "$PHP_SVC"
|
||||||
|
|
||||||
|
# Redémarrage Asterisk, Nginx, Fail2ban, Cron
|
||||||
|
systemctl restart asterisk && systemctl enable asterisk
|
||||||
|
nginx -t && systemctl restart nginx && systemctl enable nginx
|
||||||
|
systemctl restart fail2ban && systemctl enable fail2ban
|
||||||
|
systemctl restart cron && systemctl enable cron
|
||||||
|
|
||||||
|
# Exécution immédiate de la bannière console
|
||||||
|
clear || true
|
||||||
|
/usr/local/bin/nexus-banner
|
||||||
Executable
+97
@@ -0,0 +1,97 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
# ==============================================================================
|
||||||
|
# NexusPBX - Terminal Console Banner & Network Status (FreePBX-style)
|
||||||
|
# ==============================================================================
|
||||||
|
|
||||||
|
# Ne s'exécute que pour les shells interactifs
|
||||||
|
if [ -t 1 ]; then
|
||||||
|
|
||||||
|
C_GREEN="\033[1;32m"
|
||||||
|
C_CYAN="\033[1;36m"
|
||||||
|
C_WHITE="\033[1;37m"
|
||||||
|
C_YELLOW="\033[1;33m"
|
||||||
|
C_RED="\033[1;31m"
|
||||||
|
C_GRAY="\033[0;37m"
|
||||||
|
C_RESET="\033[0m"
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo -e "${C_GREEN}"
|
||||||
|
cat << "BANNER"
|
||||||
|
_ _ ____ ______ __ __
|
||||||
|
| \ | | _____ ___ _ ___ | _ \| __ ) \ \/ /
|
||||||
|
| \| |/ _ \ \/ / | | / __| | |_) | _ \ \ /
|
||||||
|
| |\ | __/> <| |_| \__ \ | __/| |_) | / \
|
||||||
|
|_| \_|\___/_/\_\\__,_|___/ |_| |____/ /_/\_\
|
||||||
|
BANNER
|
||||||
|
echo -e "${C_RESET}"
|
||||||
|
|
||||||
|
# Vérification des statuts des services
|
||||||
|
AST_STATUS=$(systemctl is-active asterisk 2>/dev/null || echo "inactive")
|
||||||
|
NGINX_STATUS=$(systemctl is-active nginx 2>/dev/null || echo "inactive")
|
||||||
|
F2B_STATUS=$(systemctl is-active fail2ban 2>/dev/null || echo "inactive")
|
||||||
|
|
||||||
|
if [ "$AST_STATUS" = "active" ] && [ "$NGINX_STATUS" = "active" ]; then
|
||||||
|
echo -e "${C_CYAN}SYSTEM READY${C_RESET} - Asterisk: ${C_GREEN}ONLINE${C_RESET} | Nginx: ${C_GREEN}ONLINE${C_RESET} | Fail2ban: ${C_GREEN}ONLINE${C_RESET}"
|
||||||
|
else
|
||||||
|
echo -e "${C_YELLOW}NOTICE! Services en cours de démarrage ou attention requise dans l'interface.${C_RESET}"
|
||||||
|
fi
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
# Tableau de configuration réseau
|
||||||
|
echo -e "${C_GREEN}Current Network Configuration${C_RESET}"
|
||||||
|
echo "+-----------------+-------------------+-----------------------------------+"
|
||||||
|
printf "| %-15s | %-17s | %-33s |\n" "Interface" "MAC Address" "IP Addresses"
|
||||||
|
echo "+-----------------+-------------------+-----------------------------------+"
|
||||||
|
|
||||||
|
FIRST_IP=""
|
||||||
|
INTERFACES=$(ip -o link show 2>/dev/null | awk -F': ' '{print $2}' | grep -v -E '^(lo|docker|veth|br-|tun|tap)')
|
||||||
|
|
||||||
|
for iface in $INTERFACES; do
|
||||||
|
MAC=$(cat /sys/class/net/"$iface"/address 2>/dev/null || echo "N/A")
|
||||||
|
|
||||||
|
# Récupère les IPv4 d'abord, puis les IPv6
|
||||||
|
IPV4S=$(ip -o -4 addr show dev "$iface" 2>/dev/null | awk '{print $4}' | cut -d/ -f1)
|
||||||
|
IPV6S=$(ip -o -6 addr show dev "$iface" scope global 2>/dev/null | awk '{print $4}' | cut -d/ -f1)
|
||||||
|
|
||||||
|
first_line=true
|
||||||
|
if [ -n "$IPV4S" ] || [ -n "$IPV6S" ]; then
|
||||||
|
for ip in $IPV4S; do
|
||||||
|
if [ -z "$FIRST_IP" ]; then FIRST_IP="$ip"; fi
|
||||||
|
if [ "$first_line" = true ]; then
|
||||||
|
printf "| %-15s | %-17s | %-33s |\n" "$iface" "$MAC" "$ip"
|
||||||
|
first_line=false
|
||||||
|
else
|
||||||
|
printf "| %-15s | %-17s | %-33s |\n" "" "" "$ip"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
for ip in $IPV6S; do
|
||||||
|
if [ "$first_line" = true ]; then
|
||||||
|
printf "| %-15s | %-17s | %-33s |\n" "$iface" "$MAC" "$ip"
|
||||||
|
first_line=false
|
||||||
|
else
|
||||||
|
printf "| %-15s | %-17s | %-33s |\n" "" "" "$ip"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
else
|
||||||
|
printf "| %-15s | %-17s | %-33s |\n" "$iface" "$MAC" "Aucune IP"
|
||||||
|
fi
|
||||||
|
echo "+-----------------+-------------------+-----------------------------------+"
|
||||||
|
done
|
||||||
|
|
||||||
|
if [ -z "$FIRST_IP" ]; then
|
||||||
|
FIRST_IP="127.0.0.1"
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo -e "${C_WHITE}Please note most tasks should be handled through the GUI.${C_RESET}"
|
||||||
|
echo -e "You can access the GUI by typing one of the above IPs into your web browser:"
|
||||||
|
echo -e " ${C_CYAN}http://${FIRST_IP}${C_RESET} ${C_GRAY}(ou https://${FIRST_IP}:8443)${C_RESET}"
|
||||||
|
echo ""
|
||||||
|
echo -e "Default credentials:"
|
||||||
|
echo -e " Username : ${C_GREEN}admin${C_RESET}"
|
||||||
|
echo -e " Password : ${C_GREEN}admin123${C_RESET}"
|
||||||
|
echo ""
|
||||||
|
echo -e "${C_GRAY}Dépôt officiel & Mises à jour : https://git.sorcier-research.com/sorcier/NexusPBX${C_RESET}"
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
fi
|
||||||
+3
-118
@@ -1,119 +1,4 @@
|
|||||||
#!/usr/bin/env bash
|
#!/usr/bin/env bash
|
||||||
set -euo pipefail
|
# Redirection vers le script d'installation principal
|
||||||
|
DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
||||||
echo "=== Configuration Debian pour NexusPBX ==="
|
exec bash "$DIR/install.sh" "$@"
|
||||||
|
|
||||||
# 1. Ajout de www-data au groupe asterisk
|
|
||||||
usermod -aG asterisk www-data
|
|
||||||
|
|
||||||
# 2. Création d'un certificat TLS local de secours pour PJSIP TLS (port 5061)
|
|
||||||
mkdir -p /etc/asterisk/keys
|
|
||||||
if [ ! -f /etc/asterisk/keys/asterisk.crt ]; then
|
|
||||||
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
|
|
||||||
-keyout /etc/asterisk/keys/asterisk.key \
|
|
||||||
-out /etc/asterisk/keys/asterisk.crt \
|
|
||||||
-subj "/C=FR/ST=IDF/L=Paris/O=NexusPBX/CN=pbx.local" 2>/dev/null
|
|
||||||
fi
|
|
||||||
|
|
||||||
# 3. Configuration de l'AMI (/etc/asterisk/manager.conf) sur 127.0.0.1:5038
|
|
||||||
cat << 'EOF' > /etc/asterisk/manager.conf
|
|
||||||
[general]
|
|
||||||
enabled = yes
|
|
||||||
port = 5038
|
|
||||||
bindaddr = 127.0.0.1
|
|
||||||
displayconnects = no
|
|
||||||
timestampevents = yes
|
|
||||||
|
|
||||||
[pbxgui]
|
|
||||||
secret = AsteriskAmi2026!
|
|
||||||
deny = 0.0.0.0/0.0.0.0
|
|
||||||
permit = 127.0.0.1/255.255.255.0
|
|
||||||
read = all
|
|
||||||
write = all
|
|
||||||
EOF
|
|
||||||
|
|
||||||
# 4. Fichiers .custom.conf initiaux et inclusions dans pjsip.conf et extensions.conf
|
|
||||||
touch /etc/asterisk/pjsip.custom.conf /etc/asterisk/extensions.custom.conf
|
|
||||||
|
|
||||||
if ! grep -q 'pjsip.custom.conf' /etc/asterisk/pjsip.conf; then
|
|
||||||
printf '\n#tryinclude "pjsip.custom.conf"\n' >> /etc/asterisk/pjsip.conf
|
|
||||||
fi
|
|
||||||
|
|
||||||
if ! grep -q 'extensions.custom.conf' /etc/asterisk/extensions.conf; then
|
|
||||||
printf '\n#tryinclude "extensions.custom.conf"\n' >> /etc/asterisk/extensions.conf
|
|
||||||
fi
|
|
||||||
|
|
||||||
# 5. Permissions Debian strictes pour asterisk:asterisk et accès groupe www-data
|
|
||||||
chown -R asterisk:asterisk /etc/asterisk
|
|
||||||
chmod 2775 /etc/asterisk
|
|
||||||
chmod 2750 /etc/asterisk/keys
|
|
||||||
chmod 0640 /etc/asterisk/keys/asterisk.key /etc/asterisk/keys/asterisk.crt
|
|
||||||
chmod 0660 /etc/asterisk/pjsip.custom.conf /etc/asterisk/extensions.custom.conf
|
|
||||||
chmod 0664 /etc/asterisk/pjsip.conf /etc/asterisk/extensions.conf
|
|
||||||
chmod 0640 /etc/asterisk/manager.conf
|
|
||||||
|
|
||||||
# 6. Permissions du projet Web et des répertoires de stockage / sauvegardes
|
|
||||||
mkdir -p /var/www/nexus-pbx/storage/backups
|
|
||||||
mkdir -p /var/www/nexus-pbx/storage/system_backups
|
|
||||||
mkdir -p /var/www/nexus-pbx/storage/sounds
|
|
||||||
mkdir -p /var/lib/asterisk/sounds/custom
|
|
||||||
mkdir -p /var/spool/asterisk/voicemail/default
|
|
||||||
|
|
||||||
chown -R www-data:asterisk /var/www/nexus-pbx
|
|
||||||
chmod 2775 /var/www/nexus-pbx/storage /var/www/nexus-pbx/storage/backups /var/www/nexus-pbx/storage/system_backups /var/www/nexus-pbx/storage/sounds
|
|
||||||
chown -R asterisk:asterisk /var/lib/asterisk/sounds /var/spool/asterisk/voicemail
|
|
||||||
chmod -R g+rwX /var/lib/asterisk/sounds /var/spool/asterisk/voicemail
|
|
||||||
|
|
||||||
# Configuration du cron pour sauvegardes automatiques NexusPBX
|
|
||||||
cat << 'EOF' > /etc/cron.d/nexus-backup
|
|
||||||
# Sauvegardes programmées automatiques NexusPBX
|
|
||||||
*/10 * * * * www-data /usr/bin/php /var/www/nexus-pbx/scripts/nexus_autobackup.php >> /var/log/nexus_backup.log 2>&1
|
|
||||||
EOF
|
|
||||||
chmod 0644 /etc/cron.d/nexus-backup
|
|
||||||
touch /var/log/nexus_backup.log && chown www-data:asterisk /var/log/nexus_backup.log && chmod 664 /var/log/nexus_backup.log
|
|
||||||
|
|
||||||
# 7. Configuration du VirtualHost Nginx (Port 80)
|
|
||||||
PHP_SOCK=$(find /run/php/ -name "php*-fpm.sock" | head -n 1)
|
|
||||||
if [ -z "$PHP_SOCK" ]; then
|
|
||||||
PHP_SOCK="/run/php/php8.4-fpm.sock"
|
|
||||||
fi
|
|
||||||
|
|
||||||
cat << EOF > /etc/nginx/sites-available/nexus-pbx
|
|
||||||
server {
|
|
||||||
listen 80 default_server;
|
|
||||||
listen [::]:80 default_server;
|
|
||||||
server_name _;
|
|
||||||
|
|
||||||
root /var/www/nexus-pbx/public;
|
|
||||||
index index.php;
|
|
||||||
|
|
||||||
access_log /var/log/nginx/nexus-pbx.access.log;
|
|
||||||
error_log /var/log/nginx/nexus-pbx.error.log;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
try_files \$uri \$uri/ /index.php?\$query_string;
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ \.php\$ {
|
|
||||||
include snippets/fastcgi-php.conf;
|
|
||||||
fastcgi_pass unix:${PHP_SOCK};
|
|
||||||
fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ /\.(?!well-known).* {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
EOF
|
|
||||||
|
|
||||||
chown root:asterisk /etc/nginx/sites-available/nexus-pbx
|
|
||||||
chmod 664 /etc/nginx/sites-available/nexus-pbx
|
|
||||||
rm -f /etc/nginx/sites-enabled/default
|
|
||||||
ln -sf /etc/nginx/sites-available/nexus-pbx /etc/nginx/sites-enabled/nexus-pbx
|
|
||||||
|
|
||||||
# 8. Redémarrage des services Debian
|
|
||||||
systemctl restart php8.4-fpm
|
|
||||||
nginx -t && systemctl restart nginx
|
|
||||||
systemctl restart asterisk
|
|
||||||
|
|
||||||
echo "=== Déploiement NexusPBX terminé avec succès ==="
|
|
||||||
Reference in new issue
Block a user