195 lines
8.4 KiB
Python
195 lines
8.4 KiB
Python
import os
|
|
import re
|
|
import time
|
|
from datetime import datetime
|
|
from subprocess import run
|
|
import json
|
|
|
|
CHANGES_REQUIRING_RESTART = ['wifi_password', 'ssid', 'enable_access_point', 'enable_chat', 'enable_deltachat', 'butterbox_hostname', 'ssh_access_settings', 'root_account_settings']
|
|
|
|
def lock_root_account():
|
|
result = run(["sudo", "passwd", "-l", "root"])
|
|
if result.returncode != 0:
|
|
return False
|
|
return True
|
|
|
|
def enable_service(service: str):
|
|
is_enabled = run(["sudo", "systemctl", "is-enabled", service], capture_output = True, text = True)
|
|
if 'found' in is_enabled.stdout:
|
|
print(f"Service {service} not found")
|
|
return False
|
|
if 'disabled' in is_enabled.stdout:
|
|
enable = run(["sudo", "systemctl", "enable", service], capture_output = True, text = True)
|
|
if enable.returncode != 0:
|
|
print(f"Issue enabling service {service}:")
|
|
print(enable)
|
|
return False
|
|
else:
|
|
print(f"Service {service} already enabled")
|
|
return True
|
|
|
|
def disable_service(service: str):
|
|
is_enabled = run(["sudo", "systemctl", "is-enabled", service], capture_output = True, text = True)
|
|
if 'found' in is_enabled.stdout:
|
|
print(f"Service {service} not found")
|
|
return False
|
|
if 'enabled' in is_enabled.stdout:
|
|
enable = run(["sudo", "systemctl", "disable", service])
|
|
if enable.returncode != 0:
|
|
print(f"issue disabling service {service}:")
|
|
print(enable)
|
|
return False
|
|
else:
|
|
print(f"Service {service} already enabled")
|
|
return True
|
|
|
|
def load_setting(setting):
|
|
with open("./settings.txt", "r") as f:
|
|
settings = json.load(f)
|
|
return settings[setting]
|
|
|
|
def change_service_status(setting, service):
|
|
if load_setting(setting) == "true":
|
|
return(enable_service(service))
|
|
else:
|
|
return(disable_service(service))
|
|
|
|
def change_keanu_weblite_config(new_hostname):
|
|
regex = re.compile('aut ?= ?"([^"]*)"')
|
|
target_file = "/var/www/html/chat/assets/index-xXHv_nhZ.js"
|
|
match_changed = False
|
|
with open(target_file, "r") as f:
|
|
lines = f.readlines()
|
|
match_exists = False
|
|
try:
|
|
for i,line in enumerate(lines):
|
|
match = regex.search(line)
|
|
if match:
|
|
match_exists = True
|
|
old_hostname = match.group(1)
|
|
print(f"Old ostname {old_hostname}, new is {new_hostname}")
|
|
if old_hostname != new_hostname:
|
|
lines[i] = re.sub(old_hostname, new_hostname, lines[i])
|
|
match_changed = True
|
|
break
|
|
else:
|
|
print(f"Old hostname same as new, not changing Keanu config")
|
|
if not match_exists:
|
|
print("Keanu weblite match not found!")
|
|
return False
|
|
except Exception as e:
|
|
print(e)
|
|
print(line)
|
|
if match_changed and lines:
|
|
new_lines = "".join(lines)
|
|
with open(target_file, "w") as f:
|
|
print(f"Writing changed file {target_file}.")
|
|
f.write(new_lines)
|
|
return True
|
|
return False
|
|
|
|
|
|
def change_line_in_file(target_file: str, regex: str, replacement: str):
|
|
regex = re.compile(regex)
|
|
if not os.path.isfile(target_file):
|
|
raise FileNotFoundError(f"File {target_file} does not exist")
|
|
else:
|
|
with open(target_file, "r") as f:
|
|
lines = f.readlines()
|
|
for i, line in enumerate(lines):
|
|
match = re.fullmatch(replacement, line)
|
|
if match:
|
|
print(f"Line already exists, not changing.")
|
|
return False
|
|
for i, line in enumerate(lines):
|
|
match = re.fullmatch(regex, line)
|
|
if match:
|
|
lines.pop(i)
|
|
break
|
|
try:
|
|
lines.append(replacement)
|
|
except NameError:
|
|
raise NameError(f"File {target_file} is empty.")
|
|
return False
|
|
new_lines = "".join(lines)
|
|
with open(target_file, "w") as f:
|
|
print(f"Writing changed line to file {target_file}.")
|
|
f.write(new_lines)
|
|
return True
|
|
|
|
|
|
def check_settings(raspap_installed: bool):
|
|
if not os.path.exists("./settings.txt"):
|
|
return
|
|
last_modified = os.path.getmtime('./settings.txt')
|
|
diff_in_minutes = (datetime.now().timestamp() - last_modified)/60
|
|
if diff_in_minutes < 2:
|
|
for s in CHANGES_REQUIRING_RESTART:
|
|
print(f"Now at setting: {s}")
|
|
if s == "wifi_password" and raspap_installed:
|
|
regex_wpa_method = "wpa=.*?\n"
|
|
if load_setting("wifi_password") == "":
|
|
change_line_in_file("/etc/hostapd/hostapd.conf", regex_wpa_method, f"wpa=none\n")
|
|
else:
|
|
change_line_in_file("/etc/hostapd/hostapd.conf", regex_wpa_method, f"wpa=3\n")
|
|
regex_pass = "wpa_passphrase=.*?\n"
|
|
change_line_in_file("/etc/hostapd/hostapd.conf", regex_pass,
|
|
f"wpa_passphrase={load_setting("wifi_password")}\n")
|
|
|
|
if s == "ssid" and raspap_installed:
|
|
regex_ssid = "ssid=.*?\n"
|
|
change_line_in_file("/etc/hostapd/hostapd.conf", regex_ssid, f"ssid={load_setting("ssid")}\n")
|
|
if s == "enable_chat":
|
|
change_service_status("enable_chat", "dendrite")
|
|
if s == "enable_access_point" and raspap_installed:
|
|
change_service_status("enable_access_point", "raspapd")
|
|
if s == "enable_deltachat":
|
|
change_service_status("enable_deltachat", "madmail")
|
|
if s == "butterbox_hostname":
|
|
# change in keanu-weblite compiled assets
|
|
new_hostname=f"{load_setting('butterbox_hostname')}.local"
|
|
print(f"Changing keanu weblite assets {change_keanu_weblite_config(new_hostname)}")
|
|
# change in butterbox-dendrite.conf
|
|
regex_matrix_server = "server_name:.*?.local\n"
|
|
result = change_line_in_file("../dendrite/butterbox-dendrite.conf", regex_matrix_server,
|
|
f"server_name: {load_setting("butterbox_hostname")}.local\n")
|
|
print(f"Changing dendrite config: {result}")
|
|
# change in butterbox-dnsmasq.conf
|
|
if raspap_installed:
|
|
regex_dns = "address=/.*?.local/10.3.141.1\n"
|
|
result = change_line_in_file("/etc/dnsmasq.d/butterbox-dnsmasq.conf", regex_dns,
|
|
f"address=/{load_setting("butterbox_hostname")}.local/10.3.141.1\n")
|
|
print(f"Changing dnsmasq config: {result}")
|
|
if s == "ssh_access_settings":
|
|
if load_setting("ssh_access_settings") == "ssh_disabled":
|
|
disable_service('ssh')
|
|
if load_setting("ssh_access_settings") == "enable_ssh_with_password":
|
|
regex_password_auth = "PasswordAuthentication.*?\n"
|
|
change_line_in_file("/etc/ssh/sshd_config", regex_password_auth,
|
|
f"PasswordAuthentication yes\n")
|
|
regex_root_login = "PermitRootLogin.*?\n"
|
|
change_line_in_file("/etc/ssh/sshd_config", regex_root_login,
|
|
f"PermitRootLogin yes\n")
|
|
elif load_setting("ssh_access_settings") == "enable_ssh_with_public_key":
|
|
regex_password_auth = "PasswordAuthentication.*?\n"
|
|
change_line_in_file("/etc/ssh/sshd_config", regex_password_auth,
|
|
f"PasswordAuthentication no\n")
|
|
regex_root_login = "PermitRootLogin.*?\n"
|
|
change_line_in_file("/etc/ssh/sshd_config", regex_root_login,
|
|
f"PermitRootLogin prohibit-password\n")
|
|
# append here new key!!!
|
|
if s == "root_account_settings":
|
|
if load_setting("root_account_settings") == "lock_root_account":
|
|
lock_root_account()
|
|
else:
|
|
# root password implementation here
|
|
pass
|
|
|
|
|
|
if __name__ == "__main__":
|
|
raspap_installed = os.path.exists("/var/www/html/raspapd")
|
|
while True:
|
|
print("sleep 10 sec")
|
|
check_settings(raspap_installed)
|
|
time.sleep(10)
|
|
|