Initialer Import der Synology Scripts

2026-08-05 08:43:57 +02:00
commit 5e32a7c411
404 changed files with 79932 additions and 0 deletions
@@ -0,0 +1,176 @@
+#!/bin/bash
+
+# Variablen setzen
+DOMAIN="iot.heim.lan"
+CERT_DIR="/etc/pki/tls/certs"
+PRIVATE_DIR="/etc/pki/tls/private"
+APACHE_CONF="/etc/httpd/conf.d/nextcloud.conf"
+NEXTCLOUD_DIR="/var/www/html/nextcloud"
+NC_DATASTORE="/volume1/DATEN1/nextcloud-data"
+DB_NAME="nextcloud"
+DB_USER="nextclouduser"
+DB_PASSWORD="P@ssw0rd"
+SYNOLOGY_IP="192.168.31.250"
+SYNOLOGY_USER="Madzone"
+SYNOLOGY_PW="P@ssw0rd"
+SYNOLOGY_PATH_SERVER="/volume1/DATEN1/HEIMLAN/IOT-NC.IOT.HEIM.LAN"
+SYNOLOGY_PATH_SubCA="/volume1/DATEN1/HEIMLAN/SubCA"
+SYNOLOGY_PATH_RootCA="/volume1/DATEN1/HEIMLAN/RootCA"
+CERT_NAME_SRV="CERT_iot-nc.iot.heim.lan.crt"
+KEY_NAME_SRV="KEY_iot-nc.iot.heim.lan.pem"
+CERT_NAME_ROOT="CERT_HEIMLAN_RootCA.crt"
+CERT_NAME_SUBCA="CERT_HEIMLAN_SubCA.crt"
+
+# System-Updates und erforderliche Pakete installieren
+00_system_update(){
+    echo "System-Updates und erforderliche Pakete installieren"
+    yum update -y
+    #yum install -y epel-release
+    subscription-manager repos --enable codeready-builder-for-rhel-8-$(arch)-rpms
+    yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
+    dnf install -y https://rpms.remirepo.net/enterprise/remi-release-8.rpm
+    dnf module enable php:remi-8.3 -y
+    yum install -y httpd mariadb-server php php-mysqlnd php-xml php-mbstring php-gd php-curl php-intl php-zip php-bcmath wget unzip mod_ssl sshpass
+}
+# Zertifikate von Synology kopieren
+01_cert_import(){
+    mkdir -p ~/.ssh
+    sudo mkdir -p /root/.ssh
+    sudo chmod 700 /root/.ssh
+    sudo ssh-keyscan -H $SYNOLOGY_IP >> ~/.ssh/known_hosts
+    ssh-keyscan -H $SYNOLOGY_IP >> ~/.ssh/known_hosts
+    sshpass -p $SYNOLOGY_PW scp $SYNOLOGY_USER@$SYNOLOGY_IP:$SYNOLOGY_PATH_SERVER/$CERT_NAME_SRV $CERT_DIR/$CERT_NAME_SRV
+    sshpass -p $SYNOLOGY_PW scp $SYNOLOGY_USER@$SYNOLOGY_IP:$SYNOLOGY_PATH_SERVER/$KEY_NAME_SRV $PRIVATE_DIR/$KEY_NAME_SRV
+    sshpass -p $SYNOLOGY_PW scp $SYNOLOGY_USER@$SYNOLOGY_IP:$SYNOLOGY_PATH_SubCA/$CERT_NAME_SUBCA $CERT_DIR/$CERT_NAME_SUBCA
+    sshpass -p $SYNOLOGY_PW scp $SYNOLOGY_USER@$SYNOLOGY_IP:$SYNOLOGY_PATH_RootCA/$CERT_NAME_ROOT $CERT_DIR/$CERT_NAME_ROOT
+}
+# Dienste starten und aktivieren
+02_service_start(){
+    systemctl start httpd mariadb
+    systemctl enable httpd mariadb
+}
+# Nextcloud herunterladen und entpacken
+03_download_nc(){
+    echo "Nextcloud herunterladen und entpacken"
+    cd /var/www/html
+    wget https://download.nextcloud.com/server/releases/latest.zip
+    unzip latest.zip
+    chown -R apache:apache $NEXTCLOUD_DIR
+    chmod -R 755 $NEXTCLOUD_DIR
+}
+# MariaDB konfigurieren
+04_install_db(){
+    echo "MariaDB konfigurieren"
+    mysql_secure_installation<<EOF
+
+y
+$DB_PASSWORD
+$DB_PASSWORD
+y
+y
+y
+y
+EOF
+}
+# Nextcloud-Datenbank und Benutzer erstellen
+05_config_nc_db(){
+    echo "Nextcloud-Datenbank und Benutzer erstellen"
+    mysql -u root -p$DB_PASSWORD<<EOF
+	CREATE DATABASE $DB_NAME;
+	CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASSWORD';
+	GRANT ALL PRIVILEGES ON $DB_NAME.* TO '$DB_USER'@'localhost';
+	FLUSH PRIVILEGES;
+	EXIT;
+EOF
+echo "Nextcloud-Datenbank mit Name $DB_NAME und Benutzer $DB_USER erstellt"
+}
+#
+
+# OnlyOffice Document Server installieren (falls erforderlich)
+07_install_onlyoffice(){
+    echo "OnlyOffice Document Server installieren"
+    yum install -y onlyoffice-documentserver
+}
+# Apache-Konfiguration erstellen
+07_config_webserver(){
+    echo "Apache-Konfiguration erstellen"
+	cat <<EOF > $APACHE_CONF
+<VirtualHost *:443>
+    DocumentRoot "$NEXTCLOUD_DIR"
+    ServerName $DOMAIN
+
+    SSLEngine on
+    SSLCertificateFile $CERT_DIR/$CERT_NAME_SRV
+    SSLCertificateKeyFile $PRIVATE_DIR/$KEY_NAME_SRV
+    SSLCertificateChainFile $CERT_DIR/$CERT_NAME_SUBCA
+
+    <Directory "$NEXTCLOUD_DIR">
+        AllowOverride All
+        Require all granted
+    </Directory>
+
+    ErrorLog /var/log/httpd/nextcloud_error.log
+    CustomLog /var/log/httpd/nextcloud_access.log combined
+</VirtualHost>
+EOF
+}
+# Firewall-Einstellungen
+08_config_firewall(){
+    echo "Firewall-Einstellungen"
+    firewall-cmd --permanent --add-service=https
+    firewall-cmd --reload
+}
+# Apache neu starten
+09_restart_webserver(){
+echo "Apache neu starten"
+systemctl restart httpd
+}
+10_ending(){
+echo "Installation abgeschlossen. Nextcloud ist unter https://"hostname-f" verfügbar."
+}
+# OPTIONAL FALLS ERFORDERLICH
+# Diese Funktionen sind bei Fehler der PHP Version und bei Aufruf der Website ( Fehlende Berechtigung ) nötig
+11_php_update(){
+    echo "PHP Version wird von 7.2 auf 8.X von REMI aktuallisiert!!!....."
+    sudo dnf install -y https://rpms.remirepo.net/enterprise/remi-release-8.rpm
+    sudo dnf module list php -y
+    sudo dnf install -y dnf-utils
+    dnf update -y
+    rpm -qi epel-release
+    dnf module reset php -y
+    dnf module enable php:remi-8.2 -y
+    dnf install php -y
+}
+12_SELINUX(){
+    sudo chcon -R -t httpd_sys_rw_content_t /var/www/html/nextcloud/
+}
+13_external_datastore(){
+    echo "Einrichtigung des External Data Storage......"
+    echo "$SYNOLOGY_IP:$NC_DATASTORE /mnt/nextcloud-data nfs defaults 0 0" >> /etc/fstab
+    sudo mkdir -p /mnt/nextcloud-data
+    sudo mount -a
+    echo "Berechtigungen fuer den External Storage werden gesetzt......"
+    sudo chown -R apache:apache /mnt/nextcloud-data
+    sudo chmod -R 755 /mnt/nextcloud-data
+    echo "****************************************************************************************"
+    echo "************* Die Einstellung wurden erfolgreich gesetzt und durchgeführt **************"
+    echo "****************************************************************************************"
+}
+
+
+#Aufruf der Funktionen
+#00_system_update
+#01_cert_import
+#02_service_start
+#03_download_nc
+04_install_db
+05_config_nc_db
+06_install_onlyoffice
+07_config_webserver
+08_config_firewall
+09_restart_webserver
+10_ending
+# OPTIONAL
+11_php_update
+12_SELINUX
+13_external_datastore