FreeBSD 9.0 Lazy Install script v1.0

#!/usr/local/bin/bash
#########################################################
### FreeBSD Lazy Install script v1.0 by www.sleepy.hu ###
#########################################################

### Updated: 2012.11.06. ###

SLEEPYHU="http://ftp.sleepy.hu/freebsd"

function install {
#MENU
select MENU in "Alapveto programok telepitese" "Xorg + XFCE4 telepitese" "Hasznos programok (GUI)" "TeamViewer telepitese" "Tuzfal" "SAMBA PDC telepitese" "Squid telepitese" "LAMP telepitese" "ISC-DHCP szerver telepitese" "Postfix telepitese" "Raid1 howto" "Raid1 lemezcsere" "Kilepes"; do

#Kilepes
if [ "$MENU" = "Kilepes" ]; then
echo "###########################################"
echo "############# www.sleepy.hu ###############"
echo "###########################################"
exit
#end Kilepes

# Raid1 lemezcsere
elif [ "$MENU" = "Raid1 lemezcsere" ]; then
gpart create -s gpt ada1
gpart add -s 64k -t freebsd-boot -l boot1 ada1
gpart add -s 1G -t freebsd-swap -l swap1 ada1
gpart add -t freebsd-ufs -l root1 ada1
gpart bootcode -b /boot/pmbr -p /boot/gptboot -i 1 ada1
echo "----------------- HELP --------------------"
echo "gmirror forget [boot|root|swap]"
echo "gmirror insert [boot|root|swap] /dev/ada1pX"
echo "gmirror status"
echo "-------------------------------------------"
exit
# end Raid1 lemezcsere

# Alapveto programok telepitese
elif [ "$MENU" = "Alapveto programok telepitese" ]; then
pkg_add -r mc wget rsync bash cups cups-pdf vlock sudo rdiff-backup
mcedit /etc/rc.conf
echo "
#//[email protected]/storage  /mnt/storage     smbfs  rw,-I10.0.0.1 0   0
" >> /etc/fstab
mcedit /etc/fstab
mcedit /etc/nsmb.conf
echo "Magyaritas..."
echo "
hungarian|Hungarian Users Accounts:\
:charset=iso-8859-2:\
:lang=hu_HU.ISO8859-2:\
:tc=default:">> /etc/login.conf
echo "
font8x14=\"iso02-8x14\"
font8x16=\"iso02-8x16\"
font8x8=\"iso02-8x8\"
snd_hda_load=\"YES\"
update_motd=\"NO\"">> /etc/rc.conf
kldload snd_driver
cap_mkdb /etc/login.conf
export EDITOR=mcedit
echo "------------------- HELP -----------------------"
echo "felhasznalonev:jelszo:1001:1001:hungarian:0:0:--"
echo "------------------------------------------------"
echo "Nyomj egy gombot..."
read
vipw
# end Alapveto programok telepitese

# Xorg + XFCE4 telepitese
elif [ "$MENU" = "Xorg + XFCE4 telepitese" ]; then
pkg_add -r xorg xfce4 xfce4-xkb-plugin hald dbus
kldload hald
kldload dbus
echo "
hald_enable=\"YES\"
dbus_enable=\"YES\"" >>/etc/rc.conf
wget $SLEEPYHU/config/xfce4-config.tar.gz
tar xzf xfce4-config.tar.gz
rm ~/xfce4-config.tar.gz
Xorg -configure
X -config xorg.conf.new -retro
cp xorg.conf.new /etc/X11/xorg.conf
# end Xorg + XFCE4

# Hasznos programok (GUI)
elif [ "$MENU" = "Hasznos programok (GUI)" ]; then
pkg_add -r vlc pidgin firefox gthumb gimp lazarus audacity brasero gprename imagination gnome-terminal transmission
kldload linux
echo "linux_enable=\"YES\"">> /etc/rc.conf
cd /usr/ports/net-im/skype
make install

cd /usr/ports/editors/gedit
make install

cd /usr/ports/distfiles
wget $SLEEPYHU/src/bsd-jdk16-patches-4.tar.bz2
wget  http://www.java.net/download/jdk6/6u3/promoted/b05/jdk-6u3-fcs-src-b05-jrl-24_sep_2007.jar
wget  http://www.java.net/download/jdk6/6u3/promoted/b05/jdk-6u3-fcs-bin-b05-jrl-24_sep_2007.jar
wget http://www.java.net/download/jdk6/6u3/promoted/b05/jdk-6u3-fcs-mozilla_headers-b05-unix-24_sep_2007.jar
wget $SLEEPYHU/src/diablo-caffe-freebsd7-i386-1.6.0_07-b02.tar.bz2
cd /usr/ports/editors/openoffice.org-3
make LOCALIZED_LANG=hu install clean

cd /usr/ports/multimedia/mplayer
make install

cd /usr/ports/multimedia/mencoder
make install
# end Hasznos programok (GUI)

# TeamViewer telepitese
elif [ "$MENU" = "TeamViewer telepitese" ]; then
pkg_add -r wine
wget http://www.teamviewer.com/download/TeamViewer_Setup_hu.exe
wine TeamViewer_Setup_hu.exe
echo "alias teamviewer='wine ~/.wine/drive_c/Program\ Files/TeamViewer/Version7/TeamViewer.exe'" >> ~/.bash_aliases
source "source .bash_aliases" >> ~/.bashrc
rm TeamViewer_Setup_hu.exe
# end TeamViewer telepitese

# SAMBA PDC
elif [ "$MENU" = "SAMBA PDC telepitese" ]; then
pkg_add -r samba35
mkdir -p /usr/local/samba/lib/netlogon
mkdir -p /usr/local/samba/profiles

mkdir -p /home/samba/netlogon
mkdir -p /home/samba/profiles
echo "
net time \\server /set /yes
net use u: \\server\home
net use m: \\server\media
" > /home/samba/netlogon/logon.bat
chmod -R 755 /home/*

mv /usr/local/etc/smb.conf /usr/local/etc/smb.conf-`date +%s`
echo "
[global]
    workgroup = DOMAIN
    server string = %h (FreeBSD RELEASE 9.0)
    null passwords = Yes
    passwd program = /usr/bin/passwd %u
    passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .
    passwd chat debug = Yes
    username map = /usr/local/etc/smbusers
    unix password sync = Yes
    log level = 3
    name resolve order = wins bcast hosts
    printcap name = CUPS
    add user script = /usr/sbin/adduser --quiet --disabled-password --gecos  %u
    delete user script = /usr/sbin/userdel -r %u
    add group script = /usr/sbin/groupadd %g
    delete group script = /usr/sbin/groupdel %g
    add user to group script = /usr/sbin/usernod -G %g %u
    add machine script = /usr/sbin/useradd -s /bin/false/ -d /var/lib/nobody %u
    logon script = %G.bat
    logon drive = u:
    domain logons = Yes
    preferred master = Yes
    wins support = Yes
    idmap uid = 15000-20000
    idmap gid = 15000-20000
    template shell = /usr/local/bin/bash

[homes]
    comment = Home
    valid users = %S
    read only = No
    browseable = No

[printers]
    comment = All Printers
    path = /var/spool/samba
    create mask = 0700
    printable = Yes
    browseable = No

[print$]
    comment = Printer Drivers
    path = /var/lib/samba/printers
    write list = root, @smbadmin

[netlogon]
    comment = Network Logon Service
    path = /home/samba/netlogon
    valid users = %U
    admin users = Administrator
    guest ok = Yes
    browseable = No

[profile]
    comment = User profiles
    path = /home/samba/profiles
    valid users = %U
    read only = No
    create mask = 0600
    directory mask = 0700
    browseable = No

[public]
    comment = Public share
    path = /public
    valid users = %U
    create mask = 0755
    directory mask = 0755
    browseable = Yes
    read only = No
    vfs objects = recycle

"> /usr/local/etc/smb.conf

echo "smbpasswd -a root"
smbpasswd -a root
echo "root = Administrator" > /usr/local/etc/smbusers
echo '
pw useradd $1$ -g gep
smbpasswd -a -m $1' > /etc/scripts/addmachine.sh
pkg_add -r cups
echo "
samba_enable=\"YES\"
cupsd_enable=\"YES\"">>/etc/rc.conf
# end SAMBA PDC

# Firewall
elif [ "$MENU" = "Tuzfal" ]; then
clear
echo "KERNEL ujraforgatasa routing+NAT funkciokohoz..."
#cd /usr/src
#wget ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/9.0-RELEASE/src.txz
#tar -C / -xvzf src.txz
#rm src.txz
cd /usr/src/sys/i386/conf
cp GENERIC IPFWKERNEL-SLEEPY
echo "
options IPFIREWALL
options IPFIREWALL_FORWARD
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=5
options IPDIVERT" >> IPFWKERNEL-SLEEPY
mcedit IPFWKERNEL-SLEEPY
cd /usr/src
make buildkernel KERNCONF=IPFWKERNEL-SLEEPY
make installkernel KERNCONF=IPFWKERNEL-SLEEPY
echo "
firewall_enable=\"YES\"
firewall_type=\"UNKNOWN\"
firewall_script=\"/etc/scripts/ipfw.rules\"

#gateway_enable=\"YES\"
#natd_enable=\"YES\"
#natd_interface=\"ext0\"
#natd_flags=\"\"" >> /etc/rc.conf
wget $SLEEPYHU/config/ipfw.rules -O /etc/scripts/ipfw.rules
# end Firewall

# Raid1 howto
elif [ "$MENU" = "Raid1 howto" ]; then
echo "
# Futtasd a FreeBSD telepitot a particionalasig, majd inditst ott egy shell-t.

# 1. lemez
gpart create -s gpt \$DISK1
gpart add -s 64k -t freebsd-boot -l boot0 \$DISK1
gpart add -s 1G -t freebsd-swap -l swap0 \$DISK1
gpart add -t freebsd-ufs -l root0 \$DISK1
gpart bootcode -b /boot/pmbr -p /boot/gptboot -i 1 \$DISK1

# 2. lemez
gpart create -s gpt \$DISK2
gpart add -s 64k -t freebsd-boot -l boot1 \$DISK2
gpart add -s 1G -t freebsd-swap -l swap1 \$DISK2
gpart add -t freebsd-ufs -l root1 \$DISK2
gpart bootcode -b /boot/pmbr -p /boot/gptboot -i 1 \$DISK2

true > /dev/\$DISK1
true > /dev/\$DISK2
ls -l /dev/gpt/

#Raid kialakitasa
kldload geom_mirror
gmirror label boot /dev/gpt/boot0 /dev/gpt/boot1
gmirror label swap /dev/gpt/swap0 /dev/gpt/swap1
gmirror label root /dev/gpt/root0 /dev/gpt/root1
gmirror status

# Raid csatolasa
newfs -U -L root /dev/mirror/root
mount /dev/mirror/root /mnt

/tmp/bsdinstall_etc/fstab tartalma:
/dev/mirror/swap  none            swap    sw      0       0
/dev/mirror/root  /               ufs     rw      1       1
Az exit paranccsal lepj ki a shel-bol, folytasd a telepitest.
Telepites vegen:
geom_mirror_load=YES >> /boot/defaults/loader.conf
daily_status_gmirror_enable=\"YES\" >> /etc/defaults/periodic.conf
#########################################################################
Lemezcsere:
gmirror forget root
gmirror insert root /dev/\$DISK11
"> /root/raid1-howto.txt
vi  /root/raid1-howto.txt
# end Raid1 howto

# ISC-DHCP szerver telepitese
elif [ "$MENU" = "ISC-DHCP szerver telepitese" ]; then
pkg_add -r isc-dhcp42-server
cd /etc/scrtipts
wget -c $SLEEPYHU/config/freebsd-dhcp.tar.gz
tar xcz freebsd-dhcp.tar.gz
rm freebsd-dhcp.tar.gz
echo "
dhcpd_enable=\"YES\"
dhcpd_ifaces=\"int0\"" >> /etc/rc.conf
# end ISC-DHCP szerver telepitese

# Squid telepitese
elif [ "$MENU" = "Squid telepitese" ]; then
pkg_add -r squid
mkdir /usr/local/etc/squid-old/
mv /usr/local/etc/squid/* /usr/local/etc/squid-old/
cd /usr/local/etc/squid
wget -c $SLEEPYHU/config/freebsd-squid.tar.gz
tar xzf freebsd-squid.tar.gz
rm freebsd-squid.tar.gz
echo "
squid_enable=\"YES\"" >> /etc/rc.conf
# end Squid telepitese

# LAMP telepitese
elif [ "$MENU" = "LAMP telepitese" ]; then
cd /usr/ports/www/apache22/
make config install distclean
echo 'apache22_enable="YES"' >> /etc/rc.conf

echo 'apache2ssl_enable="YES"' >> /etc/rc.conf
echo 'accf_http_ready="YES"' >> /etc/rc.conf && kldload accf_http

cd /usr/local/etc/apache22/
openssl genrsa -des3 -out server.key 1024
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
chmod 0400 server.key server.crt

echo 'Include etc/apache22/extra/httpd-ssl.conf' >> /usr/local/etc/apache22/httpd.conf

echo "Please disable: ServerSignature"
mcedit /usr/local/etc/apache22/extra/httpd-default.conf
mkdir -p /usr/local/www/apache22/data/ssl
echo '
NameVirtualHost *:443
<VirtualHost *:443>
ServerName lawrencium
ServerAlias lawrencium.ipc.net
DocumentRoot /usr/local/www/apache22/data/
<Directory /usr/local/www/apache22/data/>
Order allow,deny
Allow from all
</Directory>
SSLEngine On
SSLCertificateFile /usr/local/etc/apache22/ssl.crt/server.crt
SSLCertificateKeyFile /usr/local/etc/apache22/ssl.key/server.key
AllowOverride None
Order Deny, Allow
</VirtualHost>' >> /usr/local/etc/apache22/extra/httpd-vhosts.conf


cd /usr/ports/lang/php5
make config install distclean
cd /usr/ports/lang/php5-extensions
make config install distclean

cp /usr/local/etc/apache22/httpd.conf /usr/local/etc/apache22/httpd.conf.orig
cat /usr/local/etc/apache22/httpd.conf | grep -v mod_unique > httpd.conf.new
mv /usr/local/etc/apache22/httpd.conf.new /usr/local/etc/apache22/httpd.conf
echo "
AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps
" >>  /usr/local/etc/apache22/httpd.conf

echo "<IfModule mod_dir.c>
DirectoryIndex index.php index.html index.htm
</IfModule> " >>  /usr/local/etc/apache22/httpd.conf

echo "Include etc/apache22/extra/httpd-userdir.conf
Include etc/apache22/extra/httpd-vhosts.conf

<IfModule mod_dir.c>
DirectoryIndex index.php index.html index.htm
</IfModule>" >>  /usr/local/etc/apache22/httpd.conf

mcedit /usr/local/etc/apache22/extra/httpd-vhosts.conf

cp /usr/local/etc/php-ini-recommended /usr/local/etc/php.ini

cd /usr/ports/databases/mysql55-server
make install distclean
echo "mysql_enable=\"YES\"" >> /etc/rc.conf
/usr/local/etc/rc.d/mysql-server start
mysqladmin -u root password RooTpassw0rd
echo "MySQL jelszo: RooTpassw0rd beallitva."
mysql -u root -p
rm /root/.history

cd /usr/ports/databases/phpmyadmin
make config install distclean
ln -s /usr/local/www/phpMyAdmin /usr/local/www/apache22/data
cp /usr/local/www/phpMyAdmin/config.sample.inc.php config.inc.php
echo "
$cfg['blowfish_secret'] = 'ohShi9ooYaet2Cheij';
$cfg['Servers'][$i]['controluser'] = 'root';
$cfg['Servers'][$i]['controlpass'] = 'RooTpassw0rd';"
echo "Nyomd meg az ENTER-t a folytatashoz."
read
mcedit config.inc.php
# end LAMP telepitese

# Postfix telepitese
elif [ "$MENU" = "Postfix telepitese" ]; then
pkg_add -r postfix spamass-milter spamd procmail clamav
cp /usr/local/etc/postfix/main.cf /usr/local/etc/postfix/main.cf.orig
echo '
smtpd_banner = $myhostname
biff = no
append_dot_mydomain = no
readme_directory = no

myhostname = myhost.org
myorigin = $myhostname
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mydestination =   $myhostname,localhost
#relayhost =
# 50 MB = 52428800 byte
mailbox_size_limit = 1073741824
message_size_limit = 52428800

# 30 MB = 52428800 byte
#mailbox_size_limit = 31457280
#message_size_limit = 31457280

recipient_delimiter = +
inet_interfaces = all
default_transport = smtp
relay_transport = smtp
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination
inet_protocols = ipv4

smtpd_use_tls = no
smtpd_tls_cert_file = /usr/local/etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /usr/local/etc/postfix/ssl/smtpd.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

smtpd_sasl_local_domain =
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_tls_auth_only = no
smtp_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_CAfile = /usr/local/etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

#mailbox_command =
mailbox_command = /usr/local/bin/procmail -a "$EXTENSION"' > /usr/local/etc/postfix/main.cf

echo 'postfix_enable="YES"
sendmail_enable="NO"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"' >> /etc/rc.conf

echo "
daily_clean_hoststat_enable=\"NO\"
daily_status_mail_rejects_enable=\"NO\"
daily_status_include_submit_mailq=\"NO\"
daily_submit_queuerun=\"NO\"" >> /etc/periodic.conf

echo '
DEFAULT=/var/mail/$LOGNAME
MAILDIR=$HOME/mail

SUBJECT=`formail -zxSubject:`

:0
VIRUS=| clamdscan --no-summary --stdout - | cut -d' ' -f2 -

:0
SPAM=| /usr/bin/spamc


:0
* SPAM ?? !^OK
{
  :0 fw
    | formail -i"Subject: [**SPAM**]: ${SUBJECT}"
    | formail -b -f -t -I "X-SPAM-status: Yes, $MATCH"
}

:0
* VIRUS ?? !^OK
{
  :0 fw
    | formail -i"Subject: [**VIRUS**: ${VIRUS}] ${SUBJECT}"
    | formail -b -f -t -I "X-Clamav-status: Yes, $MATCH"
}

' /usr/local/etc/procmailrc
echo 'clamav_clamd_enable="YES"' >> /etc/rc.conf

/usr/local/etc/mail/spamassassin/local.cf.sample /usr/local/etc/mail/spamassassin/local.cf
chmod 755 /usr/local/etc/rc.d/spamass-milter.sh
echo '
spamd_enable=""YES"
spamass_milter_enable="YES"' >> /etc/rc.conf

/usr/local/etc/rc.d/sa-spamd onestart
/usr/local/etc/rc.d/spamass-milter onestart
/usr/local/etc/rc.d/postfix onestart
/usr/local/etc/rc.d/clamav-clamd onestart
echo 'XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X' > /root/spamtest.txt
echo 'X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*' > /root/virustest.txt
cd /usr/ports/mail/openwebmail
make install clean
cp /usr/local/www/cgi-bin/openwebmail/etc/openwebmail.conf /usr/local/www/cgi-bin/openwebmail/etc/openwebmail.conf.orig
wget $SLEEPYHU/config/openwebmail.conf -O /usr/local/www/cgi-bin/openwebmail/etc/openwebmail.conf
# end Postfix telepitese



######################################### Legvége #########################################
else
    echo Nincs ilyen menüpont.
fi
done
}
clear
echo "LazyBSD Install Script v1.0 for FreeBSD 9.0 RELEASE- Copyright © 2012 www.sleepy.hu"
echo "----------------------------------------------------------------------------"
install