875a60f90f
A free, open, self-hosted app platform (GNU AGPLv3): one-click app deploys, Traefik reverse proxy with automatic SSL, rootless Docker support, gluetun VPN routing, and a web dashboard to manage it all. Free & open forever to self-host; optional paid hosted services fund it. See PROMISE.md. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> Signed-off-by: librelad <librelad@digitalangels.vip>
90 lines
4.1 KiB
Bash
Executable File
90 lines
4.1 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
generateSSHKeyPair()
|
|
{
|
|
local username="$1"
|
|
local private_key_path="$2"
|
|
local private_key_full="$3"
|
|
local public_key_full="$4"
|
|
local flag="$5"
|
|
|
|
echo ""
|
|
isHeader "SSH Key Generation for $username"
|
|
|
|
if [[ "$flag" == "reinstall" ]]; then
|
|
if [ -f "$private_key_full" ]; then
|
|
result=$(sudo rm $private_key_full)
|
|
checkSuccess "Deleted old private SSH key $(basename "$private_key_full")"
|
|
fi
|
|
if [ -f "$public_key_full" ]; then
|
|
result=$(sudo rm $public_key_full)
|
|
checkSuccess "Deleted old public SSH key $(basename "$public_key_full")"
|
|
fi
|
|
fi
|
|
|
|
#if [[ "$username" == "root" ]]; then
|
|
#local ssh_passphrase=$CFG_SSHKEY_PASSPHRASE_ROOT
|
|
#elif [[ "$username" == "$sudo_user_name" ]]; then
|
|
#local ssh_passphrase=$CFG_SSHKEY_PASSPHRASE_ROOT
|
|
#elif [[ "$username" == "$CFG_DOCKER_INSTALL_USER" ]]; then
|
|
#local ssh_passphrase=$CFG_SSHKEY_PASSPHRASE_DOCKERINSTALL
|
|
#fi
|
|
|
|
# Supply $CFG_DOCKER_INSTALL_USER password for sudo usage
|
|
#if [[ "$username" == "$CFG_DOCKER_INSTALL_USER" ]]; then
|
|
#result=$(echo -e "$CFG_DOCKER_INSTALL_PASS\n$ssh_passphrase\n$ssh_passphrase" | sudo -u $username ssh-keygen -t ed25519 -f "$ssh_dir/$(basename "$private_key_full")" -C "$CFG_EMAIL" -N "" && sudo -u $username cat "$ssh_dir/$(basename "$private_key_full").pub" | sudo -u $username tee -a "$ssh_dir/$(basename "$private_key_full")" > /dev/null)
|
|
#checkSuccess "New ED25519 key pair generated for $username"
|
|
#else
|
|
#result=$(echo -e "$ssh_passphrase\n$ssh_passphrase" | sudo -u $username sudo ssh-keygen -t ed25519 -f "$ssh_dir/$(basename "$private_key_full")" -C "$CFG_EMAIL" -N "" && sudo -u $username cat "$ssh_dir/$(basename "$private_key_full").pub" | sudo tee -a "$ssh_dir/$(basename "$private_key_full")" > /dev/null)
|
|
#checkSuccess "New ED25519 key pair generated for $username"
|
|
#fi
|
|
|
|
# Simplified key generation without passwords
|
|
result=$(sudo -u "$username" ssh-keygen -t ed25519 \
|
|
-f "$ssh_dir/$(basename "$private_key_full")" \
|
|
-C "${CFG_INSTALL_NAME,,}@libreportal.local" \
|
|
-N "" \
|
|
&& sudo -u "$username" cat "$ssh_dir/$(basename "$private_key_full").pub" \
|
|
| sudo -u "$username" tee -a "$ssh_dir/$(basename "$private_key_full")" > /dev/null)
|
|
|
|
checkSuccess "New ED25519 key pair generated for $username"
|
|
|
|
if [ -f "$ssh_dir/$(basename $private_key_full)" ]; then
|
|
updateFileOwnership $ssh_dir/$(basename $private_key_full) $username $username
|
|
result=$(sudo mv "$ssh_dir/$(basename "$private_key_full")" "$private_key_full")
|
|
checkSuccess "Private key moved to $private_key_full"
|
|
fi
|
|
|
|
if [ -f "$ssh_dir/$(basename $public_key_full)" ]; then
|
|
updateFileOwnership $ssh_dir/$(basename $public_key_full) $username $username
|
|
result=$(sudo mv "$ssh_dir/$(basename "$public_key_full")" "$public_key_full")
|
|
checkSuccess "Public key moved to $public_key_full"
|
|
fi
|
|
|
|
result=$(createTouch "$ssh_dir/public/$(basename $private_key_full)" $username)
|
|
checkSuccess "Creating the passphrase txt to private folder."
|
|
|
|
result=$(echo "$ssh_passphrase" | sudo tee -a "$ssh_dir/public/$(basename $private_key_full)" > /dev/null)
|
|
checkSuccess "Adding the ssh_passphrase to the $(basename "$private_key_full").txt file."
|
|
|
|
result=$(sudo chmod 644 $ssh_dir/private/$(basename $private_key_full))
|
|
checkSuccess "Updating permissions for $(basename $private_key_full)"
|
|
|
|
setupSSHAuthorizedKeys $username $public_key_full;
|
|
|
|
updateSSHHTMLSSHKeyLinks;
|
|
|
|
# Select preexisting docker_type
|
|
if [ -f "$docker_dir/$db_file" ]; then
|
|
local ssh_new_key=$(sudo sqlite3 "$docker_dir/$db_file" 'SELECT content FROM options WHERE option = "ssh_new_key";')
|
|
# Insert into DB if something doesnt exist
|
|
if [[ $docker_type == "" ]]; then
|
|
databaseOptionInsert "ssh_new_key" "true";
|
|
local ssh_new_key=$(sudo sqlite3 "$docker_dir/$db_file" 'SELECT content FROM options WHERE option = "ssh_new_key";')
|
|
fi
|
|
else
|
|
:
|
|
fi
|
|
|
|
}
|